NEAS[.]0497b6e84f1cdc1067430a04f847bd90[.]exe | Triage

Sharing

General

Target

NEAS.0497b6e84f1cdc1067430a04f847bd90.exe
Size

83KB
MD5

0497b6e84f1cdc1067430a04f847bd90
SHA1

a1a6ee6cbaab2cd181b0cba61888aca754496e83
SHA256

eee49866dd5e903ea4bb14d303fd7f704088e357c3154218e5c1e0710940cb36
SHA512

dac28c3482bf2dfa7d668b4f3f1bae88de22ef32cc1cabc1885939c2c5f600621c7c10f018ded58bed6413f1bde4e4411a1308d9840fdbb6eb1b8d5e07b86f59
SSDEEP

1536:wqy2iEjQxeWNg+m2Mz5+qlteRbf4SGABBIXOAAha7ke/3o:wCjQxeUgFltsbfPnpZtd

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.0497b6e84f1cdc1067430a04f847bd90.exe

Files

NEAS.0497b6e84f1cdc1067430a04f847bd90.exe
.exe windows:5 windows x86

32398d4ef535166fe3a511a0837e8cb6

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
GetLastError
LoadLibraryA
ExitProcess

user32

wsprintfA
MessageBoxA

Sections

.text
Size: 1024B - Virtual size: 540B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 81KB - Virtual size: 84KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE