NEAS[.]e01ff9e42d04040bde926c31150706a0[.]exe | Triage

Sharing

General

Target

NEAS.e01ff9e42d04040bde926c31150706a0.exe
Size

137KB
MD5

e01ff9e42d04040bde926c31150706a0
SHA1

67da60ac6141b6753b9554936a2614690403da49
SHA256

de2f54dd6da80da605f046cf08372ccb6844504224ddbe7927219b6079e14fd8
SHA512

4af488a89c8b0f367e718f8d85f92e6284a6a43851a5049d76604cde1e08e9c718441c0560b96a429b3f3fe845934fd06edd440ba48335436f67ac5faef6dfc9
SSDEEP

384:tQ7ruB+UthhIdi3ZSz+EJxuVczXKSuSHYGSjyc3bcXVYpT0u1GcfMD01j6QITYM/:ZPt8dH5JZTKSu7ycEfcTu7YMSMYJY

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.e01ff9e42d04040bde926c31150706a0.exe

Files

NEAS.e01ff9e42d04040bde926c31150706a0.exe
.exe windows:5 windows x86

f3e3791f85a6950ffa3d1dd4505cc55e

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

InitializeCriticalSectionAndSpinCount
GetStartupInfoW
LoadLibraryW
UnhandledExceptionFilter
IsProcessorFeaturePresent
ExitProcess
GetModuleHandleW

user32

BeginPaint
DefWindowProcW
DispatchMessageW
EndPaint
GetMessageW
RegisterClassExW
ShowWindow
AdjustWindowRectEx
CreateWindowExW

gdi32

TextOutW

Sections

.MPRESS1
Size: 32KB - Virtual size: 32KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.MPRESS2
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 72KB - Virtual size: 72KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE