NEAS[.]63fafda93b6e030b9dbdfb2fc2f643a0[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.63fafda93b6e030b9dbdfb2fc2f643a0.exe
Size

4.4MB
MD5

63fafda93b6e030b9dbdfb2fc2f643a0
SHA1

d65e081560537ca1a42dd7eaf7a4b0c77557310d
SHA256

b9a27634ee481724fd5ccc0c984144614669c720d17cbcf563da88f994d1a30e
SHA512

f39473f7fd743ed1c7e5f8540ab4af66db87b0f06907271f5e29fc18b5e050fb7eac05d256c266f2e59d0e0957dd8687bd6c2a49fff1f86f9fd7d54dc6bbdb87
SSDEEP

98304:6SE1cOI8UqoNHRL7/mFPmisLQWFa0gE/qzAXxuiydyG:0cOIxHRLLUlsDF5Y0yQG

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.63fafda93b6e030b9dbdfb2fc2f643a0.exe

Files

NEAS.63fafda93b6e030b9dbdfb2fc2f643a0.exe
.exe windows:5 windows x64

28aa03df85685892c61e53ea34fc9475

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

kernel32

GetModuleHandleA

user32

EndDialog

advapi32

GetUserNameW

shell32

SHGetIconOverlayIndexA

Sections

Size: - Virtual size: 7.4MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

Size: - Virtual size: 3.2MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Size: - Virtual size: 1.3MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Size: - Virtual size: 312KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 179KB - Virtual size: 179KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE

Size: 75KB - Virtual size: 75KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE