NEAS[.]70ea1e771eb4d0eee0792ffa30bdde10[.]exe | Triage

Sharing

General

Target

NEAS.70ea1e771eb4d0eee0792ffa30bdde10.exe
Size

234KB
MD5

70ea1e771eb4d0eee0792ffa30bdde10
SHA1

4e79f2beffefcb140e72c978c28079231d4c1872
SHA256

81c5374a79ad066219e05ee447d65101024e6188d333701878c768338811f2b3
SHA512

e8f7fe13836688c394c26f2095b1ee0d83adb1085df6cd5f193facf9caa42fb0bd1bdf4f2e53efc067efa75996d43b3bc844a4539a3be3c7dce14fd6859a4e90
SSDEEP

6144:7ahWzc9wdYCkugfYfuTFu2LPTeKza4iDAqiEvnmTMZ/jL:7rc4YXQfek2LPVv4AqiEfGw

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.70ea1e771eb4d0eee0792ffa30bdde10.exe

Files

NEAS.70ea1e771eb4d0eee0792ffa30bdde10.exe
.exe windows:5 windows x86

3c6e5793e514214727b5614fbe758755

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleFileNameW
CreateFileW
GetFileSize
ReadFile
CloseHandle
VirtualAlloc
GetModuleHandleA
GetProcAddress
VirtualFree
GetProcessHeap
GetCurrentProcess
TerminateProcess
HeapAlloc
HeapFree

Sections

.text
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 464B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 229KB - Virtual size: 229KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE