NEAS[.]001bdb28c78fa7cc0c9a6e98be92b010[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.001bdb28c78fa7cc0c9a6e98be92b010.exe
Size

28KB
MD5

001bdb28c78fa7cc0c9a6e98be92b010
SHA1

4f9ed7f4fafdcad08a7268cebb4f35fe180b02a7
SHA256

d0553ec5730f92307c4fe0ca0315947a62312079243c2a4cb8bb0b4b2a2dfa9e
SHA512

f67b87fe88e47a4e6765d2cf62978b0310533c43d2be3bdd4c3996f369d254134b91ca405ae1294c5d351331e285eb75e10a32800d93e753ac17c7770345e62a
SSDEEP

96:wC1+l2n11FhplC7N7lM1yMIOB9ErQAQY:forQAQ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.001bdb28c78fa7cc0c9a6e98be92b010.exe

Files

NEAS.001bdb28c78fa7cc0c9a6e98be92b010.exe
.dll windows:4 windows x86

299fa4012f4f1a49ddabcdc304c1b8c4

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

lstrlenA
lstrcpyA
lstrcpynA
LoadLibraryA

Exports

Exports

jcpidekxmhko
jcpidekxmhkosz

Sections

.jcpid
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 260B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

INsABAcw
Size: 4KB - Virtual size: 112B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 728B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 396B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ