NEAS[.]88a8a7b4ea10180007a012b3b0af54f0[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.88a8a7b4ea10180007a012b3b0af54f0.exe
Size

78KB
MD5

88a8a7b4ea10180007a012b3b0af54f0
SHA1

e80ff2058b0cc45c5de80a1a7ce577213eaa59b1
SHA256

1b4051bcc745f6c25e194ea6696991f0e72dd22ef2971f1ef27b2b200552d13e
SHA512

653663775c02ad9e2ef7814aeffa25a6a3603d8ba2615023e18c9f141a1db2b231c9616130d214b9b22c9628631e8f3f91b8a1dd9c1eb675d697efcba5a62ab8
SSDEEP

1536:etWFkk051t4ypu6+PjDPyZktFvUp9F/RACxcqWS4:eAkX1O4u6WP//x

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.88a8a7b4ea10180007a012b3b0af54f0.exe

Files

NEAS.88a8a7b4ea10180007a012b3b0af54f0.exe
.exe windows:5 windows x86

13ba073de8b76166b928affd8c1fc4ea

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetModuleHandleA
GetProcAddress

user32

EndPaint

comctl32

InitCommonControlsEx

msimg32

AlphaBlend

Sections

.MPRESS1
Size: 22KB - Virtual size: 80KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.MPRESS2
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 18KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE