NEAS[.]f8c059ce74e4a6aee24bf890577fd910[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.f8c059ce74e4a6aee24bf890577fd910.exe
Size

752KB
MD5

f8c059ce74e4a6aee24bf890577fd910
SHA1

10a5df07271aa2955e616ed3ec32cf4aa0c03517
SHA256

d6f85d3bf59e888e38c4e10f0f9539d7b7b24e19a6c93c18744d9ebe87056973
SHA512

3ea407c5a39fabeb6a196268a04ff1bfa2f85b9f9b74395846ca885a47ee5889c83758820f6f5012e10bb385216ccaf05ed726946632d104a4f8e92f86b8630a
SSDEEP

384:2U3iGC2mrRNEGtmsXnZauYBxSMdcoTrSogBJudBQeTta9dOgvOjB2Z5XNDS9qRmV:2KitRNEGtXXnZ/JudBDtcdOhwsJKE

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.f8c059ce74e4a6aee24bf890577fd910.exe

Files

NEAS.f8c059ce74e4a6aee24bf890577fd910.exe
.exe windows:5 windows x86

32ea2988a92c31a9efd5b936dc243a44

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

cabinet

ord13

mscms

GetColorDirectoryW

kernel32

GetLastError
ExitProcess
GetModuleHandleW

Sections

.text
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 12.0MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 17KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ