NEAS[.]b308713a424830e5bd12d07bcba31be0[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.b308713a424830e5bd12d07bcba31be0.exe
Size

360KB
MD5

b308713a424830e5bd12d07bcba31be0
SHA1

2c09a462b5ca1c752b0c001cfdb57c08843f9ff2
SHA256

0a3bef71adfae8b29bc934b4cc814da0544d105fc60e8398cb8df459d5efb838
SHA512

a28ae211ea298702ab8947979fe5e342444f28b8036394fdde525628c42a753b1f4b9672597dc98a1a1c3a29496dbbccf1a82439b8e3c49be3148114c0890fbb
SSDEEP

6144:NI/9hMqw5XwPcOQlHJxM8rWtPjFunVFYhmlYf2iX6fzaBNtodz:NI/9pwhaMHJxM8rIbKzUB2ikOBkR

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.b308713a424830e5bd12d07bcba31be0.exe

Files

NEAS.b308713a424830e5bd12d07bcba31be0.exe
.exe windows:5 windows x86

09d0478591d4f788cb3e5ea416c25237

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

Sections

.text
Size: 331KB - Virtual size: 616KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 27KB - Virtual size: 28KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE