NEAS[.]dbf2c6c04afd385b9f00f2b02d145eb0[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.dbf2c6c04afd385b9f00f2b02d145eb0.exe
Size

533KB
MD5

dbf2c6c04afd385b9f00f2b02d145eb0
SHA1

a08d9aa9a90b8f276ccf211dd698587e9192d836
SHA256

844a2a4043c02ddb9c5d360c9781e81f77587e3349a2a09fc3de2f0f6ece75e2
SHA512

61e0aff7a3af5b4b4b1ab7349d98829e1f6e32f73059faefd6915746355cb40edd1d8ac2f18d1988051d23f96117c1edf7166a83b24d1ccf2231999f8497d800
SSDEEP

12288:bp0brHSoZCGXMRgizUE4eeNUCrv5qEA8W:mbrHZCXRg+4fNU+hqIW

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.dbf2c6c04afd385b9f00f2b02d145eb0.exe

Files

NEAS.dbf2c6c04afd385b9f00f2b02d145eb0.exe
.exe windows:4 windows x86

5a498eee87e4d89512a84502f500181f

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

GetProcAddress
GetModuleHandleA
LoadLibraryA

Sections

Size: 389KB - Virtual size: 896KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Size: 136KB - Virtual size: 140KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Size: 6KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE