NEAS[.]29b9c69ee9a7645357200e50558225e0[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.29b9c69ee9a7645357200e50558225e0.exe
Size

189KB
MD5

29b9c69ee9a7645357200e50558225e0
SHA1

08b2dc00a94528552bc7792236b73aa0aeed363b
SHA256

f15824065e76086517a196ffae8f43f40cf11bffe870fdef9f59a123d3a6f7a4
SHA512

f048064a4270be417f9a47db7d7761e674ba844ca04fa1932e192336abcb45e5cb0bf61c60cea44ed3ed6e8afbdd8b14c7ee45ebb1d41eb416e5a8ef78a19bae
SSDEEP

3072:9ub65Nqe6VwfDZyAs+Rk4FcJbJc2PenWwnPTJ1E78ylZm8b4BH81zFFsK:q+q3wdyd+S4KxinP11E78mmq4a1xKK

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.29b9c69ee9a7645357200e50558225e0.exe

Files

NEAS.29b9c69ee9a7645357200e50558225e0.exe
.exe windows:5 windows x86

09d0478591d4f788cb3e5ea416c25237

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

Sections

.text
Size: 159KB - Virtual size: 580KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 28KB - Virtual size: 32KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE