NEAS[.]66a32a3876c4a2e1a863d455d016f7c0[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.66a32a3876c4a2e1a863d455d016f7c0.exe
Size

139KB
MD5

66a32a3876c4a2e1a863d455d016f7c0
SHA1

9fccfb6f4cb33f85dd3505b4c296dfb3bb2aae95
SHA256

0b70b1f400be57e8770389b64e565776549b46d134966bf06322be1eefe2f3cd
SHA512

d2aa30f31b4925e31fb65bbe246bd2caa360ba6c0d6cef31923036f3eb75707aeb09ce064e509278dc1019ed3d83311181b5b448c3effb7eb06132cefc0e0f8b
SSDEEP

3072:/taoHTRyhoAScL060gorCr04r1RHrvnTEMRPOyCHklO:0uTaGFgo+LzvYMB3CHklO

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.66a32a3876c4a2e1a863d455d016f7c0.exe

Files

NEAS.66a32a3876c4a2e1a863d455d016f7c0.exe
.exe windows:1 windows x86

64369b902be8b667b461145ef39ae6b4

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

crypt32

CryptBinaryToStringA

kernel32

GetModuleHandleA
GetProcAddress
LoadLibraryA
RtlUnwind
VirtualProtect

crtdll

__GetMainArgs
exit
raise
signal

ole32

CoRevertToSelf

Sections

.text
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 129KB - Virtual size: 129KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 620B - Virtual size: 620B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 228B - Virtual size: 228B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE