NEAS[.]92478967043c53df7ceb909393316ae0[.]exe | Triage

Sharing

General

Target

NEAS.92478967043c53df7ceb909393316ae0.exe
Size

234KB
MD5

92478967043c53df7ceb909393316ae0
SHA1

4f797d5209080040292f7656e08ca29369fd6c60
SHA256

b49f11ba33f5dcdd184990db60cb78bee94df6a1c46fdaf2140f7af2300f2a68
SHA512

32cba73636e80c0e9060db44c47800db113618c968677bda37d3fe27ca7ed82ed4fc0585ce3ed97f044af752cd407665a78658a6e9dc738f770e9ad45466ac5b
SSDEEP

6144:Czbr067fB/0EnMGalJyJ7GQ1G6TkJ+O3iYgd7m:CTBZ8EnMDlGCqrkMO3KQ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.92478967043c53df7ceb909393316ae0.exe

Files

NEAS.92478967043c53df7ceb909393316ae0.exe
.exe windows:5 windows x86

3c6e5793e514214727b5614fbe758755

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleFileNameW
CreateFileW
GetFileSize
ReadFile
CloseHandle
VirtualAlloc
GetModuleHandleA
GetProcAddress
VirtualFree
GetProcessHeap
GetCurrentProcess
TerminateProcess
HeapAlloc
HeapFree

Sections

.text
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 464B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 229KB - Virtual size: 229KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE