NEAS[.]ec60fc6ad3d8c39009e0e2a855f68220[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.ec60fc6ad3d8c39009e0e2a855f68220.exe
Size

4KB
MD5

ec60fc6ad3d8c39009e0e2a855f68220
SHA1

15a2ac8aa5ecbd27815b79249d300b786aa2daf6
SHA256

8e1bcac8d2bd7b0677ae5c10161ba2cc07ba267467ecb02d4844ac2335cbe62c
SHA512

fb645d62cb0c7d97e3b2bb3d16f3daef75ef7db0a34616bf1757f5c1bc9011dd01b4c1430159f05b558364e4295c8e531d65c9666930563993f0ac3c5a8b8b64
SSDEEP

48:SWkO0IoyTnXz+ihZjoksAGnoMe/COPZaD5eLupZP:ZJTnXzvoksAGI9Znuf

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.ec60fc6ad3d8c39009e0e2a855f68220.exe

Files

NEAS.ec60fc6ad3d8c39009e0e2a855f68220.exe
.dll windows:5 windows x86

e97a70102cce77bfe0dc571cb46a4352

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

CreateFileW
VirtualAlloc
ReadFile

user32

MessageBoxA

shell32

ShellExecuteW

msvcrt

_adjust_fdiv
free
_initterm
malloc

Exports

Exports

crys

Sections

.text
Size: 1024B - Virtual size: 558B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 482B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 576B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 132B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ