NEAS[.]ae9191efb8f6ccf7ca52d411bddee150[.]exe | Triage

Sharing

General

Target

NEAS.ae9191efb8f6ccf7ca52d411bddee150.exe
Size

484KB
MD5

ae9191efb8f6ccf7ca52d411bddee150
SHA1

b7d3f762b7e280e0d541318c09f36e343ca7d791
SHA256

ee5865308f6c23b25aeef1a4f039f942384f7ffc0dfba15096b1390881aec0b2
SHA512

b5fd9d57043ee6faf4b710010f4908b389e9fe6a970740af1f23e639d2e69fd4907e2db0cb16e245d6efb8817d533b730e71b8f4e08fc59a33a43b8d0e40c79c
SSDEEP

12288:rLPkCDt1EG2XVekhdeT7V9EzMMbxYPFgeN:rLPkQ1bqAAzMMbxmN

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.ae9191efb8f6ccf7ca52d411bddee150.exe

Files

NEAS.ae9191efb8f6ccf7ca52d411bddee150.exe
.exe windows:5 windows x86

18c89e2ec0a399c68eaedd6551ce71fc

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

VirtualFree
GetModuleFileNameW
CreateFileW
GetFileSize
ReadFile
CloseHandle
VirtualAlloc
GetModuleHandleA
GetProcAddress
GetProcessHeap
GetCurrentProcess
TerminateProcess
HeapAlloc
HeapFree

Sections

.text
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 464B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 239KB - Virtual size: 239KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 756B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.l2
Size: 239KB - Virtual size: 239KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ