NEAS[.]48ffa774ae67bc05787f6c1bd15e0530[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.48ffa774ae67bc05787f6c1bd15e0530.exe
Size

4KB
MD5

48ffa774ae67bc05787f6c1bd15e0530
SHA1

5621e12cb51fdcf335f7ae4f523261c5d8b894af
SHA256

b35d81e8f5260cbff39bd7f1b2ce5191ef75b011bb4ca7c79dafbe11db510ce5
SHA512

1836a5734f81a0b7414cbc1b5be537cdadd8760e7d02ad72183d7768759d802bdcd827532e771796c5475cc7bd878484268962b95fe95554615e35f45ea0fa1e
SSDEEP

48:SWkO0IoyTnXz+ihZjokXalnyPhlvd2BgC6:ZJTnXzvok8yPF2BS

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.48ffa774ae67bc05787f6c1bd15e0530.exe

Files

NEAS.48ffa774ae67bc05787f6c1bd15e0530.exe
.dll windows:5 windows x86

e97a70102cce77bfe0dc571cb46a4352

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

CreateFileW
VirtualAlloc
ReadFile

user32

MessageBoxA

shell32

ShellExecuteW

msvcrt

_adjust_fdiv
free
_initterm
malloc

Exports

Exports

crys

Sections

.text
Size: 1024B - Virtual size: 558B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 482B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 576B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 132B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ