NEAS[.]64847265538b2bf5916b54303c3f2b50[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.64847265538b2bf5916b54303c3f2b50.exe
Size

4KB
MD5

64847265538b2bf5916b54303c3f2b50
SHA1

405bbbf72b815a4e375a3767a41d8fbccc73e1ef
SHA256

eb200579ab074137438e34191bcec6463a9296ed9abadfbd69825c2e56171d57
SHA512

73f87d4951c0b28110a85c43c9da9c8bdce42595b573fcbcf9b9f24a53e4d21d94f30c70452eaa7ea2a361044537738d2dbb416e0b2c3c3b5cd59cd9584b2000
SSDEEP

48:SWkO0IoyTnXz+ihZjok7k6aZphXg3yb7lC/doT5anabVlqSNlkcm4PZ:ZJTnXzvokg6aZA3w72W5aqVUgKDu

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.64847265538b2bf5916b54303c3f2b50.exe

Files

NEAS.64847265538b2bf5916b54303c3f2b50.exe
.dll windows:5 windows x86

e97a70102cce77bfe0dc571cb46a4352

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

CreateFileW
VirtualAlloc
ReadFile

user32

MessageBoxA

shell32

ShellExecuteW

msvcrt

_adjust_fdiv
free
_initterm
malloc

Exports

Exports

crys

Sections

.text
Size: 1024B - Virtual size: 558B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 482B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 576B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 132B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ