NEAS[.]60aab3759b963666e59687ad060b5ed0[.]exe | Triage

Sharing

General

Target

NEAS.60aab3759b963666e59687ad060b5ed0.exe
Size

47KB
MD5

60aab3759b963666e59687ad060b5ed0
SHA1

f9c6d81fed355fcd871d8adde616dc450f628c3f
SHA256

4f65306bf77a58b18d06de1d77189869c92f3b5add1f3e064b3f3a324d6245db
SHA512

f02ec83d7c8a245f9561d8086ee88c8cad2dc57c1834cbb016afd6a1960b0f26d5d683136e111baecb6b46a9f456614713c1ce94410ec4a47d8cf69483eedc29
SSDEEP

768:/v4MEc04ZzLh3VtAghWjg8qstaNC7WlH8VTrf7AshVN/OE1:/wMEcVLh3QghuGCqV8V3zhb1

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.60aab3759b963666e59687ad060b5ed0.exe

Files

NEAS.60aab3759b963666e59687ad060b5ed0.exe
.exe windows:4 windows x86

bd227ba966c127e93fe82f25f211eaca

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

VirtualFree
VirtualAlloc
GetProcAddress
ExitProcess
LoadLibraryExA
GetModuleHandleA
VirtualProtect
GetModuleFileNameA
HeapAlloc
GetProcessHeap
HeapFree

user32

wsprintfA
MessageBoxA

Sections

.data
Size: 19KB - Virtual size: 68KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ex_cod
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ex_rsc
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ