NEAS[.]6ebc1dcb98dfaf46428293a761c15040[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.6ebc1dcb98dfaf46428293a761c15040.exe
Size

230KB
MD5

6ebc1dcb98dfaf46428293a761c15040
SHA1

940078ad15131e2618e4a63bd0b77ed85f759d8c
SHA256

eaa3a987a665b1002acc5e0b9777d0bd33b1c4ef6f026ff26a700ecab6e830ef
SHA512

6f139f419cf305f996aa186df6e5e4cc8525b3d1c378293224a15d44bad61c2c3c17b668a0fa313d9858688a37c6118b42138112ac09d0c3a57a7f19e563d744
SSDEEP

3072:/MDCkU0Pj25agjZhUwuxCkKg34um3ZW7zcyEB66tRNy9+ikEV9aUMjIh14t/0:UZxL2vaCk77zZEY69iT3aUMU2M

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.6ebc1dcb98dfaf46428293a761c15040.exe

Files

NEAS.6ebc1dcb98dfaf46428293a761c15040.exe
.exe windows:5 windows x86

09d0478591d4f788cb3e5ea416c25237

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

Sections

.text
Size: 202KB - Virtual size: 596KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 27KB - Virtual size: 28KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 24B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE