NEAS[.]b14bf4dc5a08df579852f09523d221f0[.]exe | Triage

Sharing

General

Target

NEAS.b14bf4dc5a08df579852f09523d221f0.exe
Size

24KB
MD5

b14bf4dc5a08df579852f09523d221f0
SHA1

6d43b968a35ad93f07c550d2170e2337bf92448c
SHA256

ef773a51b9d5586ed98affe00e536933c39764650a7fcfc051abc3177f120fa2
SHA512

e6688d2e4686a7860dbba22f9ddeb1110bc2310862a4b69ab0917617c7a477be4279e0059a9cd8a609904a26f26232c9fb170259ef4a0690578ff2033a4f8352
SSDEEP

24:eNGS1vl4cNM/eFZRAG4n8QXVLbQHw/1AVmRftRU4OMJd0dD/10dB9Ib7HoJ0CVZ:aVWT/ezRAAO7C4tNJdeJeKHy0CV

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.b14bf4dc5a08df579852f09523d221f0.exe

Files

NEAS.b14bf4dc5a08df579852f09523d221f0.exe
.dll windows:4 windows x86

cd7d0a561aad37fb45a49d663e0076a8

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

zmodeler2.exe

?g_pZModeler204@@3PAVIModeler@core@@A
??0ZString@@QAE@XZ
?length@ZString@@QAEXJ@Z
??BZString@@QAEPADXZ
??1ZString@@QAE@XZ

msvcrt

_adjust_fdiv
memcpy
__CxxFrameHandler
free
_initterm
malloc

kernel32

GetModuleFileNameA

Sections

.text
Size: 4KB - Virtual size: 877B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 536B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 108B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 192B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 226B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ