NEAS[.]69fed1d0b522af14abb92bf0ef8a8300[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.69fed1d0b522af14abb92bf0ef8a8300.exe
Size

248KB
MD5

69fed1d0b522af14abb92bf0ef8a8300
SHA1

59e6006e7f072ff2a3f405437f977304645a13fc
SHA256

7643f80ea6a6942f4c59a703613342bf2e02af5e64946b3b40952ffc461a4b4e
SHA512

246a663b466290e55ca14dc18ef8e0ba53c54e725aae05b9f032ac815746328b78afa614bc4123eb0d164b9b421d6c048150b41ea672db9867c14fdbbd2e6798
SSDEEP

6144:3afcEHI/prnm4y3NjTjuC8xOcxphR8Nk:iHIhnmn9jT8

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.69fed1d0b522af14abb92bf0ef8a8300.exe

Files

NEAS.69fed1d0b522af14abb92bf0ef8a8300.exe
.exe windows:4 windows x86

3e3d633779e35448851e7a9ca7e72522

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_ISOLATION

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetModuleHandleA
GetProcAddress

ole32

CoInitialize

Sections

.MPRESS1
Size: 163KB - Virtual size: 404KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.MPRESS2
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 35KB - Virtual size: 35KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE