NEAS[.]5a2b7b7026bb8aa5abfcf4ebb80b7f00[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.5a2b7b7026bb8aa5abfcf4ebb80b7f00.exe
Size

282KB
MD5

5a2b7b7026bb8aa5abfcf4ebb80b7f00
SHA1

26ccbdd59ea9bece4274c7f4db759d6b5ac032fb
SHA256

3b2b9225bbe25b5d055310d9598de9e0868d7ed4aaa6c6ba8cf9f131c248b3a0
SHA512

af7fe092007b4d9e6a8d951743aa020a7eda74a4af3b850fa6cd77aaa7616ab5754ca4638fbcdc2e84eda62082486fff4e3fff7357e9c313a9fb171a831541aa
SSDEEP

6144:VwR5za+HqlckLlSNb8uBaKxW6cG+GF6nTgEY46:mR5zaoMckLMNGKxW6L+GFwTg46

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.5a2b7b7026bb8aa5abfcf4ebb80b7f00.exe

Files

NEAS.5a2b7b7026bb8aa5abfcf4ebb80b7f00.exe
.exe windows:5 windows x86

8ffc31bccd11f7f873be952d93bdc291

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

advapi32

RegOpenKeyExW

oleaut32

SysAllocStringLen

mscoree

CorBindToRuntimeEx

Sections

.text
Size: 240KB - Virtual size: 788KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 36KB - Virtual size: 36KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE