NEAS[.]8d794bdcd1862b0c3f3f883118b40af0[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.8d794bdcd1862b0c3f3f883118b40af0.exe
Size

44KB
MD5

8d794bdcd1862b0c3f3f883118b40af0
SHA1

66f3417657f764bcc7ff788681003d008e8baf0f
SHA256

46a39bb37e6e7fbf5d6d6ddf23ffcc5d631c39aa29a8607f848f5578d87bd29d
SHA512

2269f73ebd049ef54f7602f6c80f89f647609b5b3aa9873ea536296aff848363d00aa468ec3ad53bfe9c0f0abd17fdf91df9283abef8c479b758f1dc726f04e3
SSDEEP

384:IeMigwsEo6WCYpL6QNmiLA03hTzGQhYCsoRLdw9scbpSgfISlEVihO:IeMigwVImiLfTzGQh2oRJwCcp1yV

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.8d794bdcd1862b0c3f3f883118b40af0.exe

Files

NEAS.8d794bdcd1862b0c3f3f883118b40af0.exe
.exe windows:4 windows x86

7e2f1edbfa14297a38888821cca470ea

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetModuleHandleA
GetProcAddress

msvcrt

exit

user32

ShowWindow

comctl32

ord17

Sections

.MPRESS1
Size: 6KB - Virtual size: 32KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.MPRESS2
Size: 1024B - Virtual size: 939B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE