NEAS[.]430ea011978199caa2d4f5322cdb0260[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.430ea011978199caa2d4f5322cdb0260.exe
Size

192KB
MD5

430ea011978199caa2d4f5322cdb0260
SHA1

2e5467929148557c1da6b9484bf2d25bc88c5927
SHA256

a08c22e0fe59e5491e0b11d48806e4fd4b9660251b1f65faa15b02f15732785f
SHA512

a625a4bc6795a056c2992071ff8176c07e5f4e5568f4bf0ce84c8d2e01639dd56f06cccc5365fffdf814fca9b47339e32c66da57d8df9cd0ad10afd6d869fb97
SSDEEP

3072:yENOu3ap01kqMTue7+AVETnb6Km9gFTFTHugCoReiVWeJfefVUxJ+60tPH4kMFZ:jKp+kqKt7DV4bzm2FTFbIyVWeU2xgzMn

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.430ea011978199caa2d4f5322cdb0260.exe

Files

NEAS.430ea011978199caa2d4f5322cdb0260.exe
.exe windows:1 windows x86

84b346c4696dd5bf782e43918d6653c3

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

iphlpapi

GetAdaptersInfo

kernel32

GetModuleHandleA
GetProcAddress
CloseHandle
RtlUnwind

user32

GetCursorInfo

crtdll

__GetMainArgs
exit
raise
signal

ntdll

RtlInitUnicodeString
RtlFreeHeap

advapi32

RegOpenKeyExA
RegQueryValueExA

ulib

?Usage@PROGRAM@@UBEXXZ

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: - Virtual size: 40B

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 125KB - Virtual size: 125KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 896B - Virtual size: 896B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc2
Size: 313B - Virtual size: 313B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE