NEAS[.]f8a403de101798c24e279112276ddcd0[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.f8a403de101798c24e279112276ddcd0.exe
Size

66KB
MD5

f8a403de101798c24e279112276ddcd0
SHA1

c847a851edefe4b055550c54043fd861662fc9e3
SHA256

a5785a5306bcbdb53baca462b8da4704fc38633689b2e6ab11cb885133e03659
SHA512

6fbbe6190e292d2853b33012bb815d0e5012dd865ff555b8e21b7c77a9c4cf3e4280dc5f467329de14a678002062306097d7863df31c5c28e3a5890e769c4901
SSDEEP

1536:rZAVxnVY5IRErjLjSoxBrdeGQ4P1qGMw2g7N:rZBNrjLjlD9AER

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.f8a403de101798c24e279112276ddcd0.exe

Files

NEAS.f8a403de101798c24e279112276ddcd0.exe
.exe windows:4 windows x86

1a45a58ce12484f1b09ade514098e88c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

IsDBCSLeadByte
HeapLock
DeactivateActCtx
GetEnvironmentStrings
DebugActiveProcess
InitOnceBeginInitialize
GetWriteWatch
BaseDestroyVDMEnvironment
EnumResourceTypesW
FoldStringA
GetFileAttributesExW

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 51KB - Virtual size: 70KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE