NEAS[.]4ac8e2474f64079496de1bb65e92fbb0[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.4ac8e2474f64079496de1bb65e92fbb0.exe
Size

720KB
MD5

4ac8e2474f64079496de1bb65e92fbb0
SHA1

98cfa9f68030450ea37655cf0020f0282469b850
SHA256

d9a6c35bec1fcc9b1f952f7f0fe19b24babc96db691498f6d585919fe5c5e956
SHA512

5d66de53acfab55ccc6f3b1e0ff925427aa6e5b7860e16246415537f2b7db7ff1917fa9bfcd54db7c90b23c4cb66f26e4c7268c796a0400f7d9f4a26715561a7
SSDEEP

12288:kmmSgPu8dj0T7wF4SG7O8pIvDp9N2BK9f79r2z7UWiwUjjYhrhlVKEdf8dfaVkTI:2TEdkdshnee7RPZkC

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.4ac8e2474f64079496de1bb65e92fbb0.exe

Files

NEAS.4ac8e2474f64079496de1bb65e92fbb0.exe
.dll windows:6 windows x86

dcf69a78789b9f153a1c5234d07e6d9a

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

msvcrt

_except_handler4_common
_amsg_exit
_initterm
free
malloc
_XcptFilter

kernel32

Sleep
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
InterlockedCompareExchange
InterlockedExchange

Exports

Exports

RampOldTri
g_RampOld_BeadTbl

Sections

cseg
Size: 420KB - Virtual size: 419KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.text
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

dseg
Size: 50KB - Virtual size: 49KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 234KB - Virtual size: 234KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ