NEAS[.]1f9c8f505b9925f55a46c8a5f174b880[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.1f9c8f505b9925f55a46c8a5f174b880.exe
Size

385KB
MD5

1f9c8f505b9925f55a46c8a5f174b880
SHA1

cc9f44df36c40a74ceaf87e497dfb93e0557a62d
SHA256

9c5b2bc21a83a56af896eef87f9f75125594cfdefc823d4f59291ade29253041
SHA512

78ecccdc98d0ca4ddb35c566ebc3f1fba6137d8d4aee67c288849b485b482bf11632d85f171e1af5cc3cc02ee174debb84a24803dcfed4fee0970ef178a9fee7
SSDEEP

1536:9Z8kwilTEhU4HDa1KkjWXUa21mc/Mue9xc:bhlohUEK9ekpAc

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.1f9c8f505b9925f55a46c8a5f174b880.exe

Files

NEAS.1f9c8f505b9925f55a46c8a5f174b880.exe
.exe windows:4 windows x86

bcc72ef83efb1f1feb04585842b4fa1e

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

VirtualAlloc
LoadLibraryA
GetProcAddress

user32

TranslateMessage
DispatchMessageA
GetMessageA

Sections

.text
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 330B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: - Virtual size: 8B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 59KB - Virtual size: 58KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 124KB - Virtual size: 196KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE