NEAS[.]05a18fe4eeca0e99990870bd026b1950[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.05a18fe4eeca0e99990870bd026b1950.exe
Size

297KB
MD5

05a18fe4eeca0e99990870bd026b1950
SHA1

2842a462ac1186560db1ee52c186d4c402618523
SHA256

750eea8caa02108a80022ea94c72ee1c0e8b8de9870dd6cadce9993a9b104402
SHA512

adc7dd2f903865297a587b95d6a822dce65c495ea056fd8e014d836b9879a1fe184881aefa0b3052c0354bb46cbc97d7f88bbc2d7692c76bde3cfab418ad4066
SSDEEP

6144:LQuxnIDvLkLdjfDn/dqIsKLQowCmzgIaPYjOAjoleC:Uu1IDIpnFqNoqJwWOOaeC

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.05a18fe4eeca0e99990870bd026b1950.exe

Files

NEAS.05a18fe4eeca0e99990870bd026b1950.exe
.exe windows:5 windows x86

55b099990cbb00fed41881dd2fcc9b1b

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LocalAlloc
VirtualAllocEx

Sections

CODE
Size: 39KB - Virtual size: 39KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 19KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

DATA
Size: 21KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Size: 34KB - Virtual size: 34KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Size: 42KB - Virtual size: 42KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Size: 39KB - Virtual size: 39KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 98KB - Virtual size: 98KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ