NEAS[.]5cb931e9d524895e8f38702ea8319900[.]exe | Triage

Sharing

General

Target

NEAS.5cb931e9d524895e8f38702ea8319900.exe
Size

144KB
MD5

5cb931e9d524895e8f38702ea8319900
SHA1

7fcad553ad85ca4f765b328f6595b5d48c7ce103
SHA256

adf7f8cbc0ea0f8fb39da0a3669e0fbb860e98b92e63e271b9e143da26ea7567
SHA512

0425ca9b4c176649cd154fcd5414605d557740f7682b5c17ad7a2393bb5ad55e24e501a36a6181fbcc4114458d6b2115087b5c73a3d33a13a7de2a53b1b275ed
SSDEEP

3072:UFiXoQTi/vkN/7FIIg+OnbNpEvNzPfWIiJP4EsrrLSOZtC4:Uc4QTiEN/7LtAb7KNzPEPTsXLi4

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.5cb931e9d524895e8f38702ea8319900.exe

Files

NEAS.5cb931e9d524895e8f38702ea8319900.exe
.exe windows:1 windows x86

01fe59aa5709aef888d837c5be5cf77d

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

crypt32

CryptBinaryToStringA

kernel32

GetProcAddress
LoadLibraryA
RtlUnwind
VirtualProtect
GetModuleHandleW
CloseHandle
WriteFile
GetCurrentProcess
GetLastError
GetCommandLineW
CreateFileW
GetVersionExW

user32

GetWindow
LoadStringW

crtdll

__GetMainArgs
exit
raise
signal

setupapi

SetupDiEnumDeviceInterfaces

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 40B

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 124KB - Virtual size: 124KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 936B - Virtual size: 936B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc2
Size: 204B - Virtual size: 204B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE