NEAS[.]f073a8657dc4e48b4aa9830380db3ac0[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.f073a8657dc4e48b4aa9830380db3ac0.exe
Size

4KB
MD5

f073a8657dc4e48b4aa9830380db3ac0
SHA1

e211aa3f8141e8fcfc3bc2ad41ae4b0cf70b8548
SHA256

96fe7f74750f0e7230a4bdbfba1b5fa6cd813d79644671b2331faae88a0f2fa6
SHA512

c2418b3e6a5920bb2cc1f904438f69fcf5e4fafce7ffd403124ba26067d17cf2e7b1a91beee054a296965c32a1b620de0dcff8e3cfdb652e3c0f7c294b100835
SSDEEP

48:SWkO0IoyTnXz+ihZjokxVvXbfAcfBuN/+FVe5b:ZJTnXzvokxVvXbfA+uN/WO

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.f073a8657dc4e48b4aa9830380db3ac0.exe

Files

NEAS.f073a8657dc4e48b4aa9830380db3ac0.exe
.dll windows:5 windows x86

e97a70102cce77bfe0dc571cb46a4352

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

CreateFileW
VirtualAlloc
ReadFile

user32

MessageBoxA

shell32

ShellExecuteW

msvcrt

_adjust_fdiv
free
_initterm
malloc

Exports

Exports

crys

Sections

.text
Size: 1024B - Virtual size: 558B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 482B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 576B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 132B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ