NEAS[.]c6aee49d4183c09f0715ec91e952a3f0[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.c6aee49d4183c09f0715ec91e952a3f0.exe
Size

32KB
MD5

c6aee49d4183c09f0715ec91e952a3f0
SHA1

169c76257c6dbbe1c3568cc0b07d36c5c3b60fb8
SHA256

571f36d2b9959eb85d4aea19e7cad49868b3149877342e79007996ea19459bba
SHA512

68b69c26a207005689c1222e8ae318e038cf8c20761c75903d43a2b0374ef947e29157c2a03e020e934c3c425092aa7e34b3a3cb3b7d133ddc758f6635823647
SSDEEP

384:IPuva7aSUvbaO8ZfXW1UsZ5N0mpspSzs9vEbF8GMV/IrySoAbV8QWqX/6Fq4dd5:IPuCWRuY1NN0+spEs9vEbC5/ywAJ8VF

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.c6aee49d4183c09f0715ec91e952a3f0.exe

Files

NEAS.c6aee49d4183c09f0715ec91e952a3f0.exe
.exe windows:4 windows x86

b66f2358dd28c855cd1bcb856d84a6ac

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

user32

GetKeyboardType

advapi32

RegQueryValueExA

oleaut32

SysFreeString

ntdll

NtSetInformationThread

shell32

SHGetSpecialFolderPathA

Sections

CODE
Size: 24KB - Virtual size: 72KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 6KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE