NEAS[.]cf9ea50e70ff8339a0dd82dd6e1cd360[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.cf9ea50e70ff8339a0dd82dd6e1cd360.exe
Size

5KB
MD5

cf9ea50e70ff8339a0dd82dd6e1cd360
SHA1

8b451c11e2c4a7ddc608190c77786db50d7dc735
SHA256

5f43ceeb72ae8c52c435dcbaae06074865a873dda1f7a5857ef41339767f2aae
SHA512

08c25620f234c05f321f09cb16303eecbc4b595c1f21b4b900beb0f22b71d2356014837461f618198fde718b1c68b5c53a7e26565978fb6360ba48efaa74769d
SSDEEP

48:SWkO0IoyTnXz+ihZjokemW4v1qajQKgXgyxTB7t9Xls2fYL39GVYmT9:ZJTnXzvokek1Zn72Tde2wpIY2

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.cf9ea50e70ff8339a0dd82dd6e1cd360.exe

Files

NEAS.cf9ea50e70ff8339a0dd82dd6e1cd360.exe
.dll windows:5 windows x86

e97a70102cce77bfe0dc571cb46a4352

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

CreateFileW
VirtualAlloc
ReadFile

user32

MessageBoxA

shell32

ShellExecuteW

msvcrt

_adjust_fdiv
free
_initterm
malloc

Exports

Exports

crys

Sections

.text
Size: 1024B - Virtual size: 558B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 482B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 576B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 132B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ