NEAS[.]8f1fdd911b05c0224a56e65675f00560[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.8f1fdd911b05c0224a56e65675f00560.exe
Size

223KB
MD5

8f1fdd911b05c0224a56e65675f00560
SHA1

5c1aee8028307cadd92e88df4b7bae3577593f4d
SHA256

ec3929570396268e1f675039eab852f5678fe7a064c845de26e1b7f7e0f7cd6f
SHA512

cf584906805bfa323cc8d4fe41d14ad19fab81a037b7b602308dd6ef05cb8a41453a7d3b4662800e133a6f227d66d34d4b515deebddab7aef26f2ae4a4c273e7
SSDEEP

6144:PWnFhYfH3TkoCwAyfrgjtM9/WWVGix77p36:unFhSIkAyDgjtS/FZ4

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.8f1fdd911b05c0224a56e65675f00560.exe

Files

NEAS.8f1fdd911b05c0224a56e65675f00560.exe
.exe windows:5 windows x86

09d0478591d4f788cb3e5ea416c25237

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

Sections

.text
Size: 171KB - Virtual size: 580KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 50KB - Virtual size: 52KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE