NEAS[.]1dd2d1986830969184ff8d05d53b2440[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.1dd2d1986830969184ff8d05d53b2440.exe
Size

428KB
MD5

1dd2d1986830969184ff8d05d53b2440
SHA1

c82135a15baaa1b7e40fef0735cf168cd3e0d8b4
SHA256

ff59833225b35edf26720064ae23dcb13ade45b0b0dd070e46e8682c447e6c20
SHA512

7327e0669d621a2ea495c8eb7e680bcc9149b46a97fe6f6520fb568f12f295a105e1bfba6701ae01b8c4f9a7ba9c7da1413edcc9c211fcd6b33451c287dba63f
SSDEEP

6144:nMZ72hs5qqZ4m/xz6fcQUjB28UhTcR13zYSmZNf7ckMh:MZqq5qSt/96fcRj08UhTcRdzYffrS

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.1dd2d1986830969184ff8d05d53b2440.exe

Files

NEAS.1dd2d1986830969184ff8d05d53b2440.exe
.exe windows:4 windows x86

12cb72fbf3308a9787db139482b7d132

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

VirtualFree
VirtualAlloc
GetVersionExA
LoadLibraryA
GetProcAddress
ExitProcess

Sections

.text
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Size: 403KB - Virtual size: 404KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE