NEAS[.]e261b1be228bce098dc29b5b37a818a0[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.e261b1be228bce098dc29b5b37a818a0.exe
Size

302KB
MD5

e261b1be228bce098dc29b5b37a818a0
SHA1

8e5f8765b03d8769facbcd3afe9b64fe284eed2e
SHA256

b163905df16d5562e0c728b85fa5bbb0fac7f8708c8bf6caf0e8300329790dd5
SHA512

7b2191774cb4b0d7a232d0e4089b161e35e60490fb6f2f1cbad78095a43f8dc07899290cbb2c8b5df25be83515fb637c3fe065ae9f14aadb15980c44e6f2b0d6
SSDEEP

6144:l+LjhEB1aWggNOpqY8zzBZ9iEVXZZNTlCdXxiINFYJ:l+Llmdgg4nyXZZZNT6hXy

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.e261b1be228bce098dc29b5b37a818a0.exe

Files

NEAS.e261b1be228bce098dc29b5b37a818a0.exe
.exe windows:5 windows x86

8ffc31bccd11f7f873be952d93bdc291

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

advapi32

RegOpenKeyExW

oleaut32

SysAllocStringLen

mscoree

CorBindToRuntimeEx

Sections

.text
Size: 289KB - Virtual size: 776KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 6KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE