NEAS[.]5ef2a012156fbc2a05f81ca5da9eeb60[.]exe | Triage

Sharing

General

Target

NEAS.5ef2a012156fbc2a05f81ca5da9eeb60.exe
Size

3KB
MD5

5ef2a012156fbc2a05f81ca5da9eeb60
SHA1

a415d2a4c67db61c9e75c734a1e848f6af24cec7
SHA256

a7c67df2399b173a3e2c691fa087c0a0d4bb400536e17d45b3bc93d0487a72ac
SHA512

ec8d48dcd2af754aa9acc1516b409ee093ed0c089c950f336d7ecbaa7d649a8e47b5316554b87e0c202198044d9aa06a9b53d4a7d2e77b30b882fa987271dbde

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.5ef2a012156fbc2a05f81ca5da9eeb60.exe

Files

NEAS.5ef2a012156fbc2a05f81ca5da9eeb60.exe
.exe windows:4 windows x64

1d102bfe047316e1f0803d6938e60bd7

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

CreateProcessW
GetCommandLineW
GetExitCodeProcess
GetModuleFileNameW
GetStdHandle
VirtualAlloc
WaitForSingleObject
WriteFile
lstrlenW

Sections

.text
Size: 1024B - Virtual size: 784B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 128B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 512B - Virtual size: 412B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE