NEAS[.]827794c80fa9bee2dc07b84eb1ee42c0[.]exe | Triage

Sharing

General

Target

NEAS.827794c80fa9bee2dc07b84eb1ee42c0.exe
Size

3KB
MD5

827794c80fa9bee2dc07b84eb1ee42c0
SHA1

70b7513b91fcad6df6ed80dfc28273f387c78398
SHA256

efa49b8694a7ffb606576684d1e610c0c1507860c08a17651bb735f1823e66ea
SHA512

ca5abf6dde25f56af72537e9b8b3cc19d99f5594e8bc7c8f6bda4d2ef6aeabcbb3ce6b6f9224cab9e466e2d123cfc8b4bbb9cd60891a2a2d3c323be588e6045e

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.827794c80fa9bee2dc07b84eb1ee42c0.exe

Files

NEAS.827794c80fa9bee2dc07b84eb1ee42c0.exe
.exe windows:4 windows x64

1d102bfe047316e1f0803d6938e60bd7

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

CreateProcessW
GetCommandLineW
GetExitCodeProcess
GetModuleFileNameW
GetStdHandle
VirtualAlloc
WaitForSingleObject
WriteFile
lstrlenW

Sections

.text
Size: 1024B - Virtual size: 784B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 160B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 512B - Virtual size: 412B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE