NEAS[.]95210cad7322916be7e09742fa29ab80[.]exe | Triage

Sharing

General

Target

NEAS.95210cad7322916be7e09742fa29ab80.exe
Size

2.2MB
MD5

95210cad7322916be7e09742fa29ab80
SHA1

613eab8f76be276b6370d0e77bab5631fe7b2b3d
SHA256

fb0b6be19c64042b11ec01d73d968cf717b12c0b6d6c6eab4c82a2b751f3ee3a
SHA512

e1c7127674c61df87a9367a775d854b8220527a6f689f55589b324ccac9ca2cf7d1ce2d47eb4c94d7cd2537471f98d124029175ff2b72d1944796c650a86e648
SSDEEP

24576:PCM+w0R35u8vSoYhE2D1Su4fsBcZ0prTtqsxaxcAhLIVZZk4HLMn5/njEwhRII0H:PCMdU34SS7hE2pSNfEc8CycLHFlA

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.95210cad7322916be7e09742fa29ab80.exe

Files

NEAS.95210cad7322916be7e09742fa29ab80.exe
.exe windows:4 windows x86

e79fd8cb5c3eccc14c75c3cc9148087a

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

VirtualAlloc

user32

GetCursor
GetShellWindow

Sections

.text
Size: 824KB - Virtual size: 824KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 10KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1.4MB - Virtual size: 1.4MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE