NEAS[.]f18d7f9676e0cb4e413090acf6cece90[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.f18d7f9676e0cb4e413090acf6cece90.exe
Size

59KB
MD5

f18d7f9676e0cb4e413090acf6cece90
SHA1

b4eb8e4c017559d035e78cffa7283beb50ec2e9d
SHA256

0bf26d930696d3f2419f1104f8fc3171081330cede26132220f30646b83ee8ed
SHA512

f5252402a85bace1d4381f22d216eccf0679f567413d946ec8440c0a93f20cc276562e5e2b66c4e3183f7b1207fe81890075dcaae859472038d04e92263c63bf
SSDEEP

1536:JighKR+xql155X6CEVgYndCeTtLII4toUp7X:hEhl15cCmDt8I49

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.f18d7f9676e0cb4e413090acf6cece90.exe

Files

NEAS.f18d7f9676e0cb4e413090acf6cece90.exe
.exe windows:5 windows x86

09d0478591d4f788cb3e5ea416c25237

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

Sections

.text
Size: 51KB - Virtual size: 164KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE