NEAS[.]1715287e64d14601f7dc9a24038d32c0[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.1715287e64d14601f7dc9a24038d32c0.exe
Size

52KB
MD5

1715287e64d14601f7dc9a24038d32c0
SHA1

2b2652ea78168ee77910a88b45def6c6c104318d
SHA256

6fba0f92faae3617d15708735aeb94c6e4063d662d5c2080a85a339d093a6034
SHA512

f89a056f5e240a28a61ba9c63e9a8af0f01090b874aa5e7b4da08cf347a961da5a4a3007f5fd23621971747ca7ddeb6c7b9b603cf7d160fb7a3be3c849128ce4
SSDEEP

768:6FWMnYfhNypyh6o2TYQCN9QC8WHQC1mHQC6E:1C4hszo4uNt8o1Y6E

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.1715287e64d14601f7dc9a24038d32c0.exe

Files

NEAS.1715287e64d14601f7dc9a24038d32c0.exe
.exe windows:4 windows x86

1d403933ff96592925cda7eed42d20d7

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ExitProcess
MapViewOfFile
OpenFileMappingA
Sleep
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
HeapDestroy
HeapCreate
VirtualFree
HeapFree
RtlUnwind
WriteFile
GetCPInfo
GetACP
GetOEMCP
HeapAlloc
VirtualAlloc
HeapReAlloc
GetProcAddress
LoadLibraryA
MultiByteToWideChar
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW

Sections

.text
Size: 12KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 28KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ