NEAS[.]7b6c959b8cb9c74752717409be8c5e50[.]exe | Triage

Sharing

General

Target

NEAS.7b6c959b8cb9c74752717409be8c5e50.exe
Size

7KB
MD5

7b6c959b8cb9c74752717409be8c5e50
SHA1

fd8c71db87c55b29d05e102abb080053d0d611ef
SHA256

4c7651672fada96aaca8afbb0f7beeb9c89fe4e2300f23769a66f648577eae54
SHA512

e8411595bbd37eef23028ce6a5b5df25abb5b59796a700ba18c2f3f624c2ac40c4eb1f7b853818e967a35af40ec4b1f6bae1a5492369d95b48d61b0138ee0424
SSDEEP

96:veccRs+qM9QyA4DwzqSfSeC1EiWc6xuf:sqlBXKeCmiW

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.7b6c959b8cb9c74752717409be8c5e50.exe

Files

NEAS.7b6c959b8cb9c74752717409be8c5e50.exe
.exe windows:6 windows x86

a967e7dbff20324e00ecb66236077133

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

user32

MessageBoxA

msvcr110

_cexit
_ismbblead
_configthreadlocale
__setusermatherr
_initterm_e
_initterm
_acmdln
_fmode
_commode
_crt_debugger_hook
_exit
__crtTerminateProcess
?terminate@@YAXXZ
__crtSetUnhandledExceptionFilter
_lock
_unlock
_calloc_crt
__dllonexit
_onexit
_invoke_watson
_controlfp_s
_except_handler4_common
exit
__set_app_type
__getmainargs
_amsg_exit
__crtGetShowWindowMode
_XcptFilter
__crtUnhandledException

kernel32

DecodePointer
GetSystemTimeAsFileTime
GetCurrentThreadId
QueryPerformanceCounter
IsProcessorFeaturePresent
IsDebuggerPresent
EncodePointer
GetTickCount64

Sections

.text
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 892B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 480B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 942B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ