NEAS[.]de6988c2484fad3e868c92fca4cfabd0[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.de6988c2484fad3e868c92fca4cfabd0.exe
Size

73KB
MD5

de6988c2484fad3e868c92fca4cfabd0
SHA1

b2b1d67a531dea7472d260b40351ef3a5edcd75f
SHA256

b61d22f5ee021f80ea4416e611cc6b3d5a9f949099fe583825b856477d7d9464
SHA512

7237f8166c3317abb4c6f9722e50b1b44452b11e22e9b9d32a8186dd1cfe75c04792dcea51959155b774ed024d565dd3dd05eda760b4271e5c695b056e83c38a
SSDEEP

1536:JOmDPcTaxq0DKKvVRHeB7Fx4azGBrFQaw4bDAFulndhl7pmz:MmDEaJKMuxG5FQaw4aWdhzmz

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.de6988c2484fad3e868c92fca4cfabd0.exe

Files

NEAS.de6988c2484fad3e868c92fca4cfabd0.exe
.exe windows:5 windows x86

74d7c7f23cc1c85d7e4d37ad80b4bf84

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

user32

LoadIconW

advapi32

RegQueryValueExW

shell32

ShellExecuteW

ws2_32

WSAStartup

iphlpapi

GetAdaptersAddresses

Sections

.text
Size: 66KB - Virtual size: 172KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 24B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE