NEAS[.]5399c6888e2e5cf82563ee2a4d68afd0[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.5399c6888e2e5cf82563ee2a4d68afd0.exe
Size

81KB
MD5

5399c6888e2e5cf82563ee2a4d68afd0
SHA1

eaf3b580418cf7f160afacda31be4e197f5fe5fd
SHA256

d220207d7eade9edb4e19fe4e3d1af543fe4c30f0362116d1ba5ebf988c587da
SHA512

88fc1d0e9fa3fb6a1f642d45f82cc7e2043d6e81835b37102f29a94c9c6f25479e1922e97d783c6d91e51893223343a8adb37259389c9057da55edd58aa56f87
SSDEEP

1536:eNHCDLiTEeX3rIyFCs3N8aLnfi6CaEVjfZfzoo7k:e+uQeX7IGCsXfi6ZEVjfZw

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.5399c6888e2e5cf82563ee2a4d68afd0.exe

Files

NEAS.5399c6888e2e5cf82563ee2a4d68afd0.exe
.exe windows:5 windows x86 arch:x86

b892955ae494fe908bdf52e81e1dfa4c

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleHandleA
GetProcAddress
VirtualAlloc
VirtualFree
VirtualProtect

user32

EndPaint

advapi32

RegCloseKey

shell32

ShellExecuteA

ws2_32

WSAStartup

iphlpapi

GetAdaptersAddresses

Sections

sdfsdhff
Size: - Virtual size: 164KB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

sdfsdhff
Size: 75KB - Virtual size: 76KB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE