NEAS[.]4b8bbae8e33cd8fdf274b72535e4d210[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.4b8bbae8e33cd8fdf274b72535e4d210.exe
Size

148KB
MD5

4b8bbae8e33cd8fdf274b72535e4d210
SHA1

68b30ce5a180770a5cbfe4ef278fe4642ce3683a
SHA256

2227cd46231aff3ca9f4207a442165bc1e0f7521aa9f7433df514b258fb4e6c0
SHA512

5042a9e4728838eac6eb1e0ca63efaa6f8f6dbba5dbd5ac303b0fb2eecdb2fabc4467b4983f4b1ceaa9a0f3d97b6653485ae428800f466a1d614782bad1d2cdc
SSDEEP

3072:qO7XRbS4uwzKjWkYCmoMVihpya4KIEXBJR6cexlrxg:JjeWHihpyKRsl2

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.4b8bbae8e33cd8fdf274b72535e4d210.exe

Files

NEAS.4b8bbae8e33cd8fdf274b72535e4d210.exe
.dll windows:6 windows x86

20e3738a9fffa0250845e3b880caabfc

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

DisableThreadLibraryCalls
LoadResource
LockResource
FindResourceA
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
IsProcessorFeaturePresent

Exports

Exports

CchLszOfId2

Sections

.text
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 512B - Virtual size: 334B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.CRT
Size: 512B - Virtual size: 4B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 140KB - Virtual size: 140KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ