NEAS[.]6da9475299a9258f56ad579d5403e350[.]exe | Triage

Sharing

General

Target

NEAS.6da9475299a9258f56ad579d5403e350.exe
Size

78KB
MD5

6da9475299a9258f56ad579d5403e350
SHA1

c81b533e4e1e7a53f7422fb44ccd2266a84e8bd9
SHA256

208e8151c8734a3ddaddef805a47e497edebee27d357e7e0e42ddb967282ae14
SHA512

21c4f3eb83dd850251775d1a8b5b2528cbbc9c0a8f56506dbafab43be8acc6cf385aea046f27a4cec6e58256e254e3fa063eb4508637ace11dea3ad1e9274976
SSDEEP

1536:BIsjIFHRoHSeBi4JdGpgGhj+paZOfjS65Xk1:udpRoPE47G2GlhOfjX5Xk1

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.6da9475299a9258f56ad579d5403e350.exe

Files

NEAS.6da9475299a9258f56ad579d5403e350.exe
.exe windows:4 windows x86

a41cfb9fb794e01a6f8c2dea60ea2656

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

CreateWindowExA

kernel32

GetStringTypeW
GetProcAddress
GetModuleHandleA
CloseHandle
GetModuleFileNameA
LockResource
LoadResource
SizeofResource
FindResourceA
CreateMutexA
OpenMutexA
HeapFree
HeapReAlloc
HeapAlloc
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
RtlUnwind
WriteFile
GetCPInfo
GetACP
GetOEMCP
LoadLibraryA
MultiByteToWideChar
LCMapStringA
LCMapStringW
GetStringTypeA

Sections

.TEXT
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.DATA
Size: 1KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.r2rc
Size: 33KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ