NEAS[.]19b705bbab6112ffc13759a4ea4e6dd0[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.19b705bbab6112ffc13759a4ea4e6dd0.exe
Size

65KB
MD5

19b705bbab6112ffc13759a4ea4e6dd0
SHA1

015cfc760c5cfcc45018f6d2ba0eee9b04a53f31
SHA256

9fd16ca56a00a3143f80d78f98c794530b5b150f91873e31aad2c42439426eea
SHA512

4ea06dec9de1991726e87a9f26684e803677df06ccc9403ad758da123c392a2520388fd2c4a2c07f9e8abefcb8e3c64da6ef64eaa942bccb4aa4588b512673ad
SSDEEP

1536:Y0c6Ya6M53imDfW991QQ5dSDBxYRwr30Fpb+4D5K3TPVXOD:jc6Yar5u1QHCCcpS4gU

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.19b705bbab6112ffc13759a4ea4e6dd0.exe

Files

NEAS.19b705bbab6112ffc13759a4ea4e6dd0.exe
.exe windows:4 windows x86

aa1ca832e28e2c6a63685365c58b52b5

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
LoadModule

user32

MessageBoxA

Sections

.text
Size: - Virtual size: 80KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 28KB - Virtual size: 28KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.code
Size: 30KB - Virtual size: 30KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ