NEAS[.]484443d1ea0a9c9900ded062f0c194f0[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.484443d1ea0a9c9900ded062f0c194f0.exe
Size

368KB
MD5

484443d1ea0a9c9900ded062f0c194f0
SHA1

cbb3f4f1cb20badd8b61bfb18353e06cce1e3bb3
SHA256

641ebf0fa787bc9d137c0a6bc588f9f7a1269be440e97177d4514f3a3189db3a
SHA512

59ca5576917c1f4b3d5e33977b00214f7a3dd0a5c01460c052f12c2bdf3b24874145ab71920781d38d91be8f5638c791283fafd6a3ab62d706b3872f16c3b7b1
SSDEEP

6144:wJuXtXxog5E+FWPNfrf6yGEssQxNpbMEmQ:E8XNE+FuNfrSyGEssQJ4Q

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.484443d1ea0a9c9900ded062f0c194f0.exe

Files

NEAS.484443d1ea0a9c9900ded062f0c194f0.exe
.exe windows:4 windows x86

3e3d633779e35448851e7a9ca7e72522

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_ISOLATION

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetModuleHandleA
GetProcAddress

ole32

CoInitialize

Sections

.MPRESS1
Size: 170KB - Virtual size: 240KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.MPRESS2
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 144KB - Virtual size: 143KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE