NEAS[.]2015c672b177d9c341e0168ac7bfc2e0[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.2015c672b177d9c341e0168ac7bfc2e0.exe
Size

46KB
MD5

2015c672b177d9c341e0168ac7bfc2e0
SHA1

927a5709a51ccc8bc9b0ac6b0fc444c39cf86079
SHA256

0de2d778deccac5e2bd1b4106a208dd0d7fabae05c7c415a13e7e443a2159988
SHA512

9ef0a6c1f323da828b4cac58a966a2edc26929606b6f397ea85feec6a3ae0526db4f73e25a11b200723f4467ffca49cef46e5c27cb1ede889cdbfca7206b1d47
SSDEEP

768:xLzrPIsVU080KYmz/IfhX5GaeimBYsHotogR8ARwre7zgVqMNWcRFD7DpQ:lvU080dGSh4Fb08ATzgV5WcQ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.2015c672b177d9c341e0168ac7bfc2e0.exe

Files

NEAS.2015c672b177d9c341e0168ac7bfc2e0.exe
.exe windows:5 windows x86

77f51df9713d8759f46f198af959d5a3

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetModuleHandleA
GetProcAddress

advapi32

RegOpenKeyA

Sections

.MPRESS1
Size: 42KB - Virtual size: 120KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.MPRESS2
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE