NEAS[.]a91c0ce9d351fafdfe8b99f586970cc0[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.a91c0ce9d351fafdfe8b99f586970cc0.exe
Size

189KB
MD5

a91c0ce9d351fafdfe8b99f586970cc0
SHA1

eb1a2274a2241f9ddfaf1880612f0c455bcc97f2
SHA256

2a67b0e36bd54a95d569e33da1f8835daf0683c41815f7f02e9cef972f351029
SHA512

193e51cef3bc0573abdbbd4f5feaf162f4bfc5b546ca8419cea1cfc44097ab2cb47c14426d3041f518b4042b492ab3d718ea26d20838b46cc4f3fe0b3662da36
SSDEEP

3072:vjNBSrod9CIF9IOXBj8F4fCmT/QY9akFaLTXlyieaBnyDOEMDELD2XSz3N6ee:vX5jF73fCuHYpjlrBnJAD2XEN6ee

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.a91c0ce9d351fafdfe8b99f586970cc0.exe

Files

NEAS.a91c0ce9d351fafdfe8b99f586970cc0.exe
.exe windows:1 windows x86

c5f1e2c930cbbf7abd56f59541a0868a

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
LoadLibraryA
GetModuleHandleW
lstrcpyW
CloseHandle
GetCurrentThreadId
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetStartupInfoW
GetLastError
GetCommandLineW
lstrlenW
CreateFileW
GetVersionExW

user32

RegisterClassW
GetActiveWindow
SetWindowLongW
LoadStringW
SendMessageW
wsprintfW

advapi32

RegOpenKeyExW
RegSetValueExW
RegCreateKeyExW
RegQueryValueExW
RegCloseKey

Sections

.text
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 132KB - Virtual size: 132KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 208B - Virtual size: 208B

IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.bss
Size: 409B - Virtual size: 409B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE