NEAS[.]8b0d93dcbbc5a8e99b648cef2fe95a30[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.8b0d93dcbbc5a8e99b648cef2fe95a30.exe
Size

306KB
MD5

8b0d93dcbbc5a8e99b648cef2fe95a30
SHA1

f925fa6a1c76d05a70943545d9ccd77541cc4779
SHA256

9dd591fc69ade8edd5360f84a86516c149862e714b56e843c3d4500315ae0a1a
SHA512

8f763f28a92dc1e14e49bf66eeaf8e563b79a131699d1a3c1e98bd1ab15ba1c530ed4be17b4da0e8cd3335c0445ee8a8937bec29ec12e9635b165fd4074bf576
SSDEEP

6144:eafcEHI/prnm4y3NjTjuC8xOcxphwKJcfh2m71ZVmQ:LHIhnmn9jT8sp71ZIQ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.8b0d93dcbbc5a8e99b648cef2fe95a30.exe

Files

NEAS.8b0d93dcbbc5a8e99b648cef2fe95a30.exe
.exe windows:4 windows x86

3e3d633779e35448851e7a9ca7e72522

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_ISOLATION

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetModuleHandleA
GetProcAddress

ole32

CoInitialize

Sections

.MPRESS1
Size: 163KB - Virtual size: 404KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.MPRESS2
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 79KB - Virtual size: 78KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.l2
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ