NEAS[.]fb9056a4b583aac2af33fe252c459900[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.fb9056a4b583aac2af33fe252c459900.exe
Size

3KB
MD5

fb9056a4b583aac2af33fe252c459900
SHA1

f9f9ca26552cac2f37de7d2bfba2181d544e82ba
SHA256

1f89aec4a11fcc57cccdafb7cd6c3adf014849396d20afde714a3e9671f3f7a1
SHA512

7d807b530c1c36ee4e3ffe4e5278af50e0beec249a3d9f99c1c35a1418a7ff0bd15298f2660e64a704942e9bb7799163814edc8bae3edae71ebf0cef31a16cc0

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.fb9056a4b583aac2af33fe252c459900.exe

Files

NEAS.fb9056a4b583aac2af33fe252c459900.exe
.dll windows:5 windows x86

e97a70102cce77bfe0dc571cb46a4352

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

CreateFileW
VirtualAlloc
ReadFile

user32

MessageBoxA

shell32

ShellExecuteW

msvcrt

_adjust_fdiv
free
_initterm
malloc

Exports

Exports

crys

Sections

.text
Size: 1024B - Virtual size: 558B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 482B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 576B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 132B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ