NEAS[.]f01b7de22029311d10275c9a2203307c[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.f01b7de22029311d10275c9a2203307c.exe
Size

233KB
MD5

f01b7de22029311d10275c9a2203307c
SHA1

fcee6b67cc4748c4c145074664b81c746be37514
SHA256

20e84d91bd1465c689c4199f4e32b2ee23d8576649d259382c1e6be083e21673
SHA512

9277ed10a895cc7de367fec0c01b5a56aff0ea42c81d20d3a4e03a37b3c51755ffce245084e0c55d7dba454412312e4d48c66efd5c5d6b4e4b7e46b9aaac8204
SSDEEP

6144:d9tqEIGS6hz6Wj8290X0SDNq1kU72HVx5mB+sM+h/:dmEIGxt6Wj82yLG24+sd1

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.f01b7de22029311d10275c9a2203307c.exe

Files

NEAS.f01b7de22029311d10275c9a2203307c.exe
.exe windows:5 windows x86 arch:x86

3c6e5793e514214727b5614fbe758755

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleFileNameW
CreateFileW
GetFileSize
ReadFile
CloseHandle
VirtualAlloc
GetModuleHandleA
GetProcAddress
VirtualFree
GetProcessHeap
GetCurrentProcess
TerminateProcess
HeapAlloc
HeapFree

Sections

.text
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 464B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 229KB - Virtual size: 228KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 636B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ