NEAS[.]b499fdcb4e1d1ea603d68556809267e0[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.b499fdcb4e1d1ea603d68556809267e0.exe
Size

16KB
MD5

b499fdcb4e1d1ea603d68556809267e0
SHA1

6a7a030b0ab49c45e6969879e5e4d29b14ce41c9
SHA256

573996471ef8bda0065e75cd90ebfbb3d95b0804f64b2a84325b525ac54936ff
SHA512

ef4f449e364bcc031d5d49ec6c09badc80baa419d867864f6b655de200c23c86edee64b28f00c988e8b5a5e9a78ab4e705dc0d4895ab446213940df9124905e9
SSDEEP

192:ONn+QDhFGhmQBvWYcCPQ2a/cHwwHrz8SB9Q0duiUEk//4Xgv5dfbnkDjQRvBjx4G:ONn+dyFC/aCH38SbZ4nxVWQhBjCQ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.b499fdcb4e1d1ea603d68556809267e0.exe

Files

NEAS.b499fdcb4e1d1ea603d68556809267e0.exe
.exe windows:4 windows x86

b55f776e57c6a6e791d3ddbe3178ef57

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

MessageBoxA

kernel32

LoadLibraryA
FreeLibrary
lstrcatA
lstrlenA
ExitProcess
VirtualAlloc
GetProcAddress

advapi32

RegQueryValueExA
RegCloseKey
RegOpenKeyExA

Sections

.text
Size: 1024B - Virtual size: 534B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 398B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 13KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ