NEAS[.]4483d0cf12f8bb552053bbd8be07f4f0[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.4483d0cf12f8bb552053bbd8be07f4f0.exe
Size

211KB
MD5

4483d0cf12f8bb552053bbd8be07f4f0
SHA1

37f98deabbfa20e4f56c827ff3299ecba7bff127
SHA256

cb7f99ea1e73e17199fb16aff27401d89b0a2e1eecb9a8a7ec94981a762f6bee
SHA512

ec6ecb30bcbfa948edf784fa85d02f1d0a0a22796e04432d5ba00e68d883377b6a546c3657255e6a94e947c106cba7a92bf4b3c74db581bec5fd3cd7c09f3e5f
SSDEEP

6144:Fl2/rr8DtTse9SsPCsN7JmycQxdqZy3mW9s:aktgG1Cm7vcQxdqS9s

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.4483d0cf12f8bb552053bbd8be07f4f0.exe

Files

NEAS.4483d0cf12f8bb552053bbd8be07f4f0.exe
.exe windows:4 windows x86

691f1193f16065947032ace3a2329e55

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetModuleHandleA
GetProcAddress

msvcrt

fabs

comctl32

InitCommonControls

user32

IsChild

gdi32

BitBlt

ole32

CoInitialize

shell32

ShellExecuteExA

shlwapi

PathQuoteSpacesA

Sections

.MPRESS1
Size: 204KB - Virtual size: 752KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.MPRESS2
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 984B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE