NEAS[.]8ffbdc7b71dac4e50fb216378fc15790[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.8ffbdc7b71dac4e50fb216378fc15790.exe
Size

29KB
MD5

8ffbdc7b71dac4e50fb216378fc15790
SHA1

d43e47ab2322123ed853dc7bed0a23804559ddec
SHA256

13b6e9578044c72f44c75a4f5102780d387cddf1ffe37b4fad55012ee61e0ddc
SHA512

6e50f58695ccf4b45d14c59c4ebcbca5dad84508ef7081c6b1c6f13bf1fc1feb29dcfa5de74c282ce069a71a511ff62ac43aad32335b58632074f9c871dfff73
SSDEEP

384:CXXnyLWbnvQbztLLHtM0zBkwCpVk58sCubA4euHvjMTHRI:CnnOWEvtPvkFk58sCu84eum6

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.8ffbdc7b71dac4e50fb216378fc15790.exe

Files

NEAS.8ffbdc7b71dac4e50fb216378fc15790.exe
.exe windows:5 windows x86

04d57c63a0a96f737ab7ac761ddeb655

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ExitProcess

ole32

CoInitializeEx
CoUninitialize
CoCreateInstance

Sections

.text
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ