NEAS[.]040de15b1fc64282597b3ab381003340[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.040de15b1fc64282597b3ab381003340.exe
Size

84KB
MD5

040de15b1fc64282597b3ab381003340
SHA1

5cbad0b664e77c7283718cb07ee7a51eaa653812
SHA256

9b842ccdd7fc1e98e0973f2b489ec967effe041b7d6918baedffe5fe430040ca
SHA512

261a609f36b89b3a64877fec7e3beb7d0c45e341954796bc9bebacea37be9e21800991e00273828bbc87fe3c2ec86cd3da8c54846a37efe6e701d6976db72aca
SSDEEP

1536:d+OieUW4uIqeBvvcopHCOBhfd3qClQX2oooD+AyxArwIVJ9dMNUU:d+m4uIdcORa8QXMmwI/wUU

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.040de15b1fc64282597b3ab381003340.exe

Files

NEAS.040de15b1fc64282597b3ab381003340.exe
.exe windows:4 windows x86

5a498eee87e4d89512a84502f500181f

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
GetModuleHandleA
LoadLibraryA

Sections

.text
Size: 36KB - Virtual size: 60KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 4KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 8KB - Virtual size: 40KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 28KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE