NEAS[.]16d9e9d01699d6307efa31faa2de0640[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.16d9e9d01699d6307efa31faa2de0640.exe
Size

192KB
MD5

16d9e9d01699d6307efa31faa2de0640
SHA1

c513e318452ce9b08d546d8faa3320c5f3ad8e71
SHA256

461be5d7e486cf377c22cbf5f9e230dd08b3d20c355c8ea7a0379888e5ab410d
SHA512

b55fb8db1319ea312f44220f80da0190c85d987dcaa0d023b11ea86895a92400fb3d8f2383378c83f600497827ebac08b597e04e08efae2305ac1029d0c61b08
SSDEEP

3072:tJCD54VJS7f2LkiCXl5/MMzu//ZaGDdWf2LkiCXl5/MMzu//ZRGDG:28gxu/xzDdpgxu/x8DG

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.16d9e9d01699d6307efa31faa2de0640.exe

Files

NEAS.16d9e9d01699d6307efa31faa2de0640.exe
.exe windows:4 windows x86

bd51a645a9c68bd03b2e51586e5cbdcb

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
LoadLibraryA

Sections

.text
Size: 44KB - Virtual size: 43KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 92KB - Virtual size: 89KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.virus
Size: 52KB - Virtual size: 52KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE