NEAS[.]056525f5f593dd7e2549219c33b0bcb0[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.056525f5f593dd7e2549219c33b0bcb0.exe
Size

84KB
MD5

056525f5f593dd7e2549219c33b0bcb0
SHA1

95d8eabb8aa5f98cec9bdca9042e9f7f9d500d78
SHA256

cf12faa49be3914f263d130692485a293b8f1c997b94fd3748544ff3d38840ac
SHA512

c34db702a2fb26b7f2ff31e982a93bfd36eb1da2c5ec73afdb101d38de3bbeea41cb3b5c0bd8a41840fc8388b2ed3623d6f4273398f79e7000a05e6dbbc6b3ef
SSDEEP

1536:XLlxz3Th3+FIo60FQcdyWehGLn0zQue3qClQX2oooD+AyxArwIVJ9dvN1:XLloF/gWehTHea8QXMmwI/F1

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.056525f5f593dd7e2549219c33b0bcb0.exe

Files

NEAS.056525f5f593dd7e2549219c33b0bcb0.exe
.exe windows:4 windows x86

5a498eee87e4d89512a84502f500181f

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
GetModuleHandleA
LoadLibraryA

Sections

.text
Size: 36KB - Virtual size: 64KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 4KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 8KB - Virtual size: 40KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 28KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE