NEAS[.]1edd415d86deb1f6c54f41b57bf57a70[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.1edd415d86deb1f6c54f41b57bf57a70.exe
Size

484KB
MD5

1edd415d86deb1f6c54f41b57bf57a70
SHA1

f629bf5565bbf874be526113a0f98a3f675c463a
SHA256

9292998805c9767525e24911231353ad39de7885cbaf8299f272b9e5a754c36a
SHA512

4973b023255fb616c235ba94ad780c5c764751c57b3ed65fb5e109ab219b8d3c108d89e001ea03a77cbb0121a22c9c33f2bf03f89e8ba1d7943020ed66720a95
SSDEEP

12288:GLPkCDt1EG2XVekhdeTy/7RvmtMym+gp:GLPkQ1bqAkmtMf+gp

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.1edd415d86deb1f6c54f41b57bf57a70.exe

Files

NEAS.1edd415d86deb1f6c54f41b57bf57a70.exe
.exe windows:5 windows x86

18c89e2ec0a399c68eaedd6551ce71fc

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

VirtualFree
GetModuleFileNameW
CreateFileW
GetFileSize
ReadFile
CloseHandle
VirtualAlloc
GetModuleHandleA
GetProcAddress
GetProcessHeap
GetCurrentProcess
TerminateProcess
HeapAlloc
HeapFree

Sections

.text
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 464B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 239KB - Virtual size: 239KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 756B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.l2
Size: 239KB - Virtual size: 239KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ