NEAS[.]df1c5fa3af509f4c0131e8dcbf161070[.]exe | Triage

Sharing

General

Target

NEAS.df1c5fa3af509f4c0131e8dcbf161070.exe
Size

35KB
MD5

df1c5fa3af509f4c0131e8dcbf161070
SHA1

56bf917124bd6bdbb729e7b0df8712e6878edb0f
SHA256

a22ee54ee6de0133495fd9fa98ec47f75669c77260c06950d8e7edc4d1387adc
SHA512

f41e776037622e9dccad9031a7c254be26977653db36b00474adb8cfa6f7ac18f4c62ff7fde8ce89b59d8b4ededf53f362c6cde6df5712e12e646f156e8e57dd
SSDEEP

768:0MaC/DIBhfcuLgE1O2C5pn8YiXMt/skFztsScKiJov:0M5acu3G5pn8Yi8t/s2CbhSv

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.df1c5fa3af509f4c0131e8dcbf161070.exe

Files

NEAS.df1c5fa3af509f4c0131e8dcbf161070.exe
.exe windows:5 windows x86

09d0478591d4f788cb3e5ea416c25237

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

Sections

.text
Size: 9KB - Virtual size: 44KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 22KB - Virtual size: 24KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 1024B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE