NEAS[.]f68443e266f05007a162797b29ba6f00[.]exe | Triage

Sharing

General

Target

NEAS.f68443e266f05007a162797b29ba6f00.exe
Size

193KB
MD5

f68443e266f05007a162797b29ba6f00
SHA1

15d556abe67fd3025e9b70e3a4ca5ed0b2195739
SHA256

9351d7c0eceefe43b76ebd49fd69247f148a900445d7dc1bb7fcebac02085eb0
SHA512

fa3d6d2e5eb6f408a0b11f929a8a4cb302a1e40fe7d27d6fe47c85c86ae57a44e8635d93aef3bb97a82c504f96c992952619915f7a5a0c6e21ea07296d8f7eab
SSDEEP

6144:25XdiBQamZSxdvQFYePmI2rLGdqVrm6mybi2BD:25Xd8bmZ+EYCELSx6xiUD

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.f68443e266f05007a162797b29ba6f00.exe

Files

NEAS.f68443e266f05007a162797b29ba6f00.exe
.exe windows:5 windows x86

3c0e70bfa5f73f1f1cef484e2bcb5bf8

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleHandleA

user32

MessageBoxA

Sections

.text
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 512B - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 1KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 176KB - Virtual size: 208KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata4
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata3
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata2
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 92KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Size: 9KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE