NEAS[.]004745f7eeaa3ebd3793e868026b8c30[.]exe | Triage

Sharing

General

Target

NEAS.004745f7eeaa3ebd3793e868026b8c30.exe
Size

196KB
MD5

004745f7eeaa3ebd3793e868026b8c30
SHA1

bc4f754f1c53ffe55b49fc26e5ab30a5e9544035
SHA256

7ee754bf3e7f4f7add1d0a6f86ac86d3baf849267c5fc23250a70f25a5f326a3
SHA512

a1069418cf2346ea0f5c2c7efa026f98131e984157e76ee8daf4d3b070a8cf6c00d42e01a5640232bfcd47835daa02b15895b9e40a27ce4faa77f029af60b8c1
SSDEEP

6144:rylOvGLj4V98xEzqUiQ3Ro+a6iGZpd5XI4:6Ovl9+Oq5Q3RdaZGZ+4

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.004745f7eeaa3ebd3793e868026b8c30.exe

Files

NEAS.004745f7eeaa3ebd3793e868026b8c30.exe
.exe windows:4 windows x86

29bd810f448a640871ce275f73c6c03a

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
SetLastError
LoadLibraryA

Sections

.text
Size: 45KB - Virtual size: 45KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 144KB - Virtual size: 144KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ