NEAS[.]63f4aa61fe021d2fe5f21659391e0c50[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.63f4aa61fe021d2fe5f21659391e0c50.exe
Size

989KB
MD5

63f4aa61fe021d2fe5f21659391e0c50
SHA1

51e4af506b829f275ebf86b753598c3a339c8d14
SHA256

2e0f16f3b80b57f3ee25171e55d332c168f032619df9ab902fdf0cb863ac10ff
SHA512

0ccf11aa877d3664d0383fee9f67f57aeebcc34c3935b1f3860fd7d6b6c7799aa564f28aaeb36bfe73e7743364fd576e6363c6030b950966af09cb86d79b427d
SSDEEP

12288:Wxlmy/9b1eOkc9zZsppkR0NuGlMhjdP+sXpRvY9c3qQriXvWNE81gkYhcIvp4OmC:iB1j36HugOum3qQIWmqGp4OO9yaSQQ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.63f4aa61fe021d2fe5f21659391e0c50.exe

Files

NEAS.63f4aa61fe021d2fe5f21659391e0c50.exe
.exe windows:5 windows x86

06fa29813db6c1f98441703604fe5cf8

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
LoadLibraryA
GetModuleHandleA
VirtualProtect
ExitProcess

Sections

.text
Size: 588KB - Virtual size: 588KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 152KB - Virtual size: 152KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 9KB - Virtual size: 54KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 177KB - Virtual size: 177KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 51KB - Virtual size: 51KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ