NEAS[.]615ef5d60844e33aa36925d9ae5bdee0[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.615ef5d60844e33aa36925d9ae5bdee0.exe
Size

25KB
MD5

615ef5d60844e33aa36925d9ae5bdee0
SHA1

2bcea737ff711bd78a992fec5f84f846293ebbed
SHA256

81d325b5ff7612fd7cab5a72d43fe409e831c681bba61af6afac41ff226d4fd7
SHA512

40a527d93ef7beed4bd20843b917429fa776e9cbcd53762675b0c3864be40c57efc68024c469459b3472c04c13971b9a7ff66c3e3ceaa1fce3b297abf0f43997
SSDEEP

384:MIw07lRnDvTwFVmoDxRvYpXSCkChhE+QAHbfN+mirnEh08n4MS:Mp2FrwTmoTvjC0+QAtJDS

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.615ef5d60844e33aa36925d9ae5bdee0.exe

Files

NEAS.615ef5d60844e33aa36925d9ae5bdee0.exe
.exe windows:5 windows x86

e0ee6ba068adb3775390f0ebfb108602

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetModuleHandleA
GetProcAddress

user32

EndDialog

gdi32

CreateFontIndirectA

Sections

.MPRESS1
Size: 5KB - Virtual size: 28KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.MPRESS2
Size: 1024B - Virtual size: 911B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE