NEAS[.]3bdf899be6997e35eb09853c11a7da60[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.3bdf899be6997e35eb09853c11a7da60.exe
Size

35KB
MD5

3bdf899be6997e35eb09853c11a7da60
SHA1

9b337e4eda4504a7c3722b39c1762938af4f8e85
SHA256

f0b5bf380fe6364ccb81353279ed506d62eabd3992fb2b18126fe193bf160491
SHA512

d396575a4eeeaac53630bd4ade785bf3fb97ce6250bc998525e059d57d463a52bd94282f04f85ca966e4008528b610bbf2b37a563292de89550652584fe7b385
SSDEEP

96:I/kCVlbUt0gNwfUb4st0dSDYYuZHG3r7O:IMCLb24fddZ0r7O

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.3bdf899be6997e35eb09853c11a7da60.exe

Files

NEAS.3bdf899be6997e35eb09853c11a7da60.exe
.dll windows:4 windows x86

24b3d2952588080766f7fd68e6e8f755

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL

Imports

kernel32

DisableThreadLibraryCalls
RaiseException

Sections

.text
Size: 4KB - Virtual size: 320B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rodata
Size: 4KB - Virtual size: 44B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 4KB - Virtual size: 60B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

/4
Size: 4KB - Virtual size: 216B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.edata
Size: 4KB - Virtual size: 555B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 4KB - Virtual size: 136B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 4KB - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ