NEAS[.]83df4d0ddcbc7cfe3638955b45d214e0[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.83df4d0ddcbc7cfe3638955b45d214e0.exe
Size

119KB
MD5

83df4d0ddcbc7cfe3638955b45d214e0
SHA1

752032326bc69ed24cb9a48d8ae1b25c68513b83
SHA256

5e66cdae50f5279be88361662643eb7cc78f236f3c2e5deba201d98630548217
SHA512

693e5f4cc44d05a79f245b72beaa511453fa74a4618e4664c96b5c68330f236587190a605634ee5f2f9ba53c4f3430f8c9e740a5a96c3eac9d87e69e24950df8
SSDEEP

3072:KlEDCBtH5ZehvEpupHUGNGZMEC6c43AsiXnVYZU:KltH5ZUvRpkZMEClYARVYy

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.83df4d0ddcbc7cfe3638955b45d214e0.exe

Files

NEAS.83df4d0ddcbc7cfe3638955b45d214e0.exe
.exe windows:4 windows x86

00c804629853a86475f84c9e140981d9

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CheckForReadOnlyResource
BeginUpdateResourceA
CreatePipe
InitializeProcThreadAttributeList
AddResourceAttributeAce
UTUnRegister
ReadConsoleOutputA
GetCompressedFileSizeTransactedA
WideCharToMultiByte

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 105KB - Virtual size: 126KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE