NEAS[.]8c68c1872633766450a28d31d78f7570[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.8c68c1872633766450a28d31d78f7570.exe
Size

13KB
MD5

8c68c1872633766450a28d31d78f7570
SHA1

d89f27ff2e2f7a6c704093890f403ff3c74b13d7
SHA256

1c19f6372ac3ff551bb6a294fc1c433602f71f2cc9f19545ec6566639713bd22
SHA512

2a5e67010e245deccaf552e0e535f64a6b69fcaf06c278e59cfe8c11268f4f2677a497f61562857c3f0f5ce46e0e311552d2d74a0b82d3919c46593f5deba33d
SSDEEP

192:W5Ir16piTe4QVPz0hFWaZwb0F5omSXkz6wOsr8dWFK2iw8m7eFXI:WU6Ieh1z0hFV+wTPSUewO1M8m7i

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.8c68c1872633766450a28d31d78f7570.exe

Files

NEAS.8c68c1872633766450a28d31d78f7570.exe
.exe windows:4 windows x86

ae0a5112fe1176f4e5f6e1bc95e4c209

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

MessageBoxA

kernel32

FreeLibrary
lstrcatA
GetModuleFileNameA
ExitProcess
LoadLibraryA
GetProcAddress
lstrlenA

advapi32

RegQueryValueExA
RegCloseKey
RegOpenKeyExA

Sections

.text
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 404B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ