NEAS[.]f5b990a793a577e0f9712c8c6ea9d2b0[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.f5b990a793a577e0f9712c8c6ea9d2b0.exe
Size

164KB
MD5

f5b990a793a577e0f9712c8c6ea9d2b0
SHA1

b6020d9a64855b51d7d8feb5fb79ef934fbd4ce6
SHA256

43858ef78fb25fcbc3a3265bd50a6c78f998169fb8d80bdec30b11a0c600592d
SHA512

89cf49627f53fe6420edf59ae18b95f0d8afcd6cc939208a2a9802caaaf07d0e0a8298cf2311c3f64f008821e7612b7756fb5ac8a7685833ad894512d00ccc78
SSDEEP

3072:RLIHL0JP3lf6/+xtcxpWloCEjh9MYSsBRu:BfP1i2xkpYEt993u

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.f5b990a793a577e0f9712c8c6ea9d2b0.exe

Files

NEAS.f5b990a793a577e0f9712c8c6ea9d2b0.exe
.exe windows:1 windows x86

0e4021554a373d5cb9215de2f75bd91d

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ReadProcessMemory
WriteProcessMemory
TerminateProcess
ExitProcess
GetStartupInfoA
CreateProcessA
GetCommandLineA
GetCurrentProcess
ResumeThread
GetThreadContext

user32

MessageBoxA

Sections

code
Size: 322B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

data
Size: 220B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

IMPORTS
Size: 66B - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

imports
Size: 392B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

relocs
Size: 114B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

resource
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.text
Size: 160KB - Virtual size: 160KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE