NEAS[.]4e99f05de9898e058939545301a93490[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.4e99f05de9898e058939545301a93490.exe
Size

317KB
MD5

4e99f05de9898e058939545301a93490
SHA1

14a79b437dd1b213f798ea6772c9d3004e3f61a6
SHA256

0dc43715ad0aa6b7f471eef41cc64493a416840cd5fdce7661042efc940745a3
SHA512

eae2d41df620a5d14911af1dca970bcf993799c95560d34db75c8543643b345b07b300fe74d8bcea898ecf7164e34722fca547562a632a96dc20088421f453e4
SSDEEP

6144:PU0USPuHKKAsgBZg178Z+Snk6Fpwlw8RmuZSz8VdPbMK95BL7jGjFUHpJ+MBvs:2SPXSzJSk6FpwlzmupVdjx5B/mFYJ+es

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.4e99f05de9898e058939545301a93490.exe

Files

NEAS.4e99f05de9898e058939545301a93490.exe
.exe windows:5 windows x86

09d0478591d4f788cb3e5ea416c25237

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

Sections

.text
Size: 310KB - Virtual size: 512KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE