NEAS[.]03ba5261f3b5392013f487ca32fc8180[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.03ba5261f3b5392013f487ca32fc8180.exe
Size

3KB
MD5

03ba5261f3b5392013f487ca32fc8180
SHA1

9500204468395091734681fecf0145dc14a5714a
SHA256

d6b51d7183b4474eaecdd33932fe02e4c369e66774a230eab004c8fdb7602c01
SHA512

cc7076b61f41dea6104b49f719d6621f6889875e09ddc7bb61e33a4309dca2c432a678103f5c1a32f8ece622e75d10ae8421bc9e5b73dfee248d5e4f21be40c4

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.03ba5261f3b5392013f487ca32fc8180.exe

Files

NEAS.03ba5261f3b5392013f487ca32fc8180.exe
.exe windows:4 windows x64

1d102bfe047316e1f0803d6938e60bd7

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

CreateProcessW
GetCommandLineW
GetExitCodeProcess
GetModuleFileNameW
GetStdHandle
VirtualAlloc
WaitForSingleObject
WriteFile
lstrlenW

Sections

.text
Size: 1024B - Virtual size: 784B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 128B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 512B - Virtual size: 412B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE