NEAS[.]17f992d49c669090b533e8883417c120[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.17f992d49c669090b533e8883417c120.exe
Size

208KB
MD5

17f992d49c669090b533e8883417c120
SHA1

54f02df7b64b9dc6c5d532c60dd509f434718714
SHA256

64c0544f25a2c2e5e15574fe25761db9bba754b942cfc3626b55a4425526ce95
SHA512

d606cd594041b4f43d3e8d443144a87309ae06ca1e7fc966caba442a939817771f1b542d7d1aa0cb33f411a0a78c8600f70cb5805ac3f052e17a77ab5d47eb71
SSDEEP

3072:tU9ECPRLDV5g9FbNCpEFqaatd5nCoaszIYgkYopqPLYPBU85X1ASkUVtTw:RcLDV29B4+4axbszWkYpDx85XuSXjTw

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.17f992d49c669090b533e8883417c120.exe

Files

NEAS.17f992d49c669090b533e8883417c120.exe
.exe windows:5 windows x86

09d0478591d4f788cb3e5ea416c25237

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

Sections

.text
Size: 179KB - Virtual size: 596KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 27KB - Virtual size: 28KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE