NEAS[.]3cf3bc793d7c62c948d94d6ed871f050[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.3cf3bc793d7c62c948d94d6ed871f050.exe
Size

226KB
MD5

3cf3bc793d7c62c948d94d6ed871f050
SHA1

6da33472fd1fa5f095b8ba4727b80ca8d290f9d9
SHA256

d4bc4472b9b8f84f12ad571c73387c032b40d8ce1aadeb926451f14eb1ec94f3
SHA512

684bb7120db19c9e14fc997436f370f8de1a1510a5ca267ff21c2a1fa6624ac3697c4e4e7ff02aa360a8ade61610d725bc18018d4dd8191dd9a4b2c2698a2aa4
SSDEEP

6144:bZSE8UGJwiYwUfWeR7oHYnOW111mFW+Lw:B3GFY/jWHYt1yW+0

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.3cf3bc793d7c62c948d94d6ed871f050.exe

Files

NEAS.3cf3bc793d7c62c948d94d6ed871f050.exe
.exe windows:4 windows x86

4517235d6f012421e28370dfa4e6f8c4

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_ISOLATION

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetModuleHandleA
GetProcAddress

ole32

CoInitialize

rpcrt4

RpcMgmtEpUnregister

Sections

.MPRESS1
Size: 165KB - Virtual size: 264KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.MPRESS2
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 15KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE