NEAS[.]71dfb8f8e1c10e84f65b4871120f6290[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.71dfb8f8e1c10e84f65b4871120f6290.exe
Size

16KB
MD5

71dfb8f8e1c10e84f65b4871120f6290
SHA1

8ce9d2ad2a3cc90084bdc3d1fa4a558ab3035993
SHA256

a65142be81850148abba39c8297f3fa317d19808d029ad9385b952f64d81bfd3
SHA512

59e672511d18c337b7ec88d2897348cc50866021ecc4df850c218258ca2f9e9bcd59e5acacc9071a35a5d6e716a61f7727f10fe40ab9664f7cdb8930c9881604
SSDEEP

192:kqhkKK5OYKGvBoOOJf6H1S2rHVzcr5cx9WLWYKGvBoOOJf6H1S2rp:kqhkK6vFBoOsqkEHFcrE9sHFBoOsqkEp

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.71dfb8f8e1c10e84f65b4871120f6290.exe

Files

NEAS.71dfb8f8e1c10e84f65b4871120f6290.exe
.exe windows:4 windows x86

ae0a5112fe1176f4e5f6e1bc95e4c209

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

MessageBoxA

kernel32

FreeLibrary
lstrcatA
GetModuleFileNameA
ExitProcess
LoadLibraryA
GetProcAddress
lstrlenA

advapi32

RegQueryValueExA
RegCloseKey
RegOpenKeyExA

Sections

.text
Size: 1024B - Virtual size: 556B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 404B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ