NEAS[.]259fb2f1f5a42cc1e84beb5ba6346170[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.259fb2f1f5a42cc1e84beb5ba6346170.exe
Size

176KB
MD5

259fb2f1f5a42cc1e84beb5ba6346170
SHA1

0df84beb33481ffe0e60d27a2375c12699afb0d6
SHA256

9ec3c8e7154d895d007b18e66af69fbc9288f2124ef7d50b4d14817a264dcf76
SHA512

f54fbaf45bbd5663af6de99308547d4b01ff97e6186e24164f5b813e30dcfed19e31f4be7e2d9e82307788244fadca130cdd6fc11b65cc1e1c87c4e5d53a4818
SSDEEP

3072:LjsXmbWzYXmirjtMFmtv5pF73kMO3lYEp2F87iHzFHro25CnOkrR6:LAXmbY6rjaFmtv5pFXO1Zp2ysHsgiOkg

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.259fb2f1f5a42cc1e84beb5ba6346170.exe

Files

NEAS.259fb2f1f5a42cc1e84beb5ba6346170.exe
.exe windows:5 windows x86

1a365c75673e54e5722aa34d02af2fc8

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

user32

LoadAcceleratorsW

gdi32

DeleteDC

advapi32

LookupPrivilegeValueW

shell32

ShellExecuteW

ws2_32

WSAStartup

Sections

.text
Size: 170KB - Virtual size: 564KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE