NEAS[.]4a0ed55388d79939c844146f5ee37800[.]exe | Triage

Sharing

General

Target

NEAS.4a0ed55388d79939c844146f5ee37800.exe
Size

119KB
MD5

4a0ed55388d79939c844146f5ee37800
SHA1

b318d294c384428cb15ad415511e4195dce38660
SHA256

93d03835e96870bba8d03d85633a7d69ef593a7d0e0af7ffbcc75ec60c17b9b8
SHA512

670f8de9544ce6b15dffe8b93e85a1033777027c1a7bcde5ba6de1081aa17c90e6ef517d31562b676aebe141d877431cff398f0e211ffff7fa30dcf5c918fc3d
SSDEEP

3072:vPFCHNI3jUw1WIvOCjjNL9ST6DhN8NPsFfABix9:otoUV2rPr8NEfABi

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.4a0ed55388d79939c844146f5ee37800.exe

Files

NEAS.4a0ed55388d79939c844146f5ee37800.exe
.exe windows:4 windows x86 arch:x86

92cb819a17fc773833461e8d004f147e

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
ExitProcess
GetModuleHandleA

ole32

GetHGlobalFromStream

msvbvm60

ord690

Sections

pec1
Size: 112KB - Virtual size: 368KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE