NEAS[.]facb344e4527dafd36e603a2e3655ed0[.]exe | Triage

Sharing

General

Target

NEAS.facb344e4527dafd36e603a2e3655ed0.exe
Size

4KB
MD5

facb344e4527dafd36e603a2e3655ed0
SHA1

fae822c24b342dc6f27d38b4169dc1630da8dea5
SHA256

ff0b7658b358354054279d48671eefd117e706cff298758f152ac1fa794a78d1
SHA512

00142174e551ab2c8bb749c1b2a0fd2a67d8ec1571809711159f42ed2e97e4dba0a809ee5a1c270b44dcfb623a3ed122aa1b4f7c4800f546d78644887a85f0ea

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.facb344e4527dafd36e603a2e3655ed0.exe

Files

NEAS.facb344e4527dafd36e603a2e3655ed0.exe
.exe windows:4 windows x86

80e137dbd57e9295d8184a7d6c03bc24

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ExitProcess
GetStdHandle
WriteConsoleA
Sleep
GetLocalTime

urlmon

URLDownloadToFileA

Sections

.text
Size: 512B - Virtual size: 144B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 512B - Virtual size: 276B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ