NEAS[.]2f8bca46ff1f7fe9a5cce69da952bed0[.]exe | Triage

Sharing

General

Target

NEAS.2f8bca46ff1f7fe9a5cce69da952bed0.exe
Size

54KB
MD5

2f8bca46ff1f7fe9a5cce69da952bed0
SHA1

cf96ee63dd6b73fafba49dce480bd6b84dad2379
SHA256

1391060ebe698e755c1d84131795b60902e3bf0e88c264cae72fc08175af2f6e
SHA512

19bdcd85d5639a8ea86fe56067f5f6ed50d793ce35cc10378d0bf649b2228e56160f547a6e7ca3c0c4e83d380120102a7bbdf3e88fb1134aee26a108d5e732b4
SSDEEP

1536:wmL/ODyx+/DZZoKl5TvvYkP9fQQ57lDElNOa:Xd+/DLoUTnYgKQLna

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.2f8bca46ff1f7fe9a5cce69da952bed0.exe

Files

NEAS.2f8bca46ff1f7fe9a5cce69da952bed0.exe
.exe windows:5 windows x86

09d0478591d4f788cb3e5ea416c25237

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

Sections

.text
Size: 44KB - Virtual size: 128KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE