NEAS[.]f6863fac04fc86402c78a85c02a9f9d0[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.f6863fac04fc86402c78a85c02a9f9d0.exe
Size

17KB
MD5

f6863fac04fc86402c78a85c02a9f9d0
SHA1

b935d72b0f16ecd36976f91a0a1b8110bc39ab59
SHA256

6ae8d21ebb6acb4adc0960fc2168ff4aa2347aa0289e1e9b4213e425f95a27e2
SHA512

9871981b3061af3876ef243df5a6791e78472160348759e1b56ead09ead2cb7fa0fbdd0b8bd54381e603dba2026787d20830dadc4f91bee5c50d200557563408
SSDEEP

384:8qhGZttOxru3dtnUquEsgUCpx/8c+6lucOakibTu4OOBMSCuLBUxrJiypisZ:nC8xru3d1UquEsgUCpx/8c+6lucOFibu

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.f6863fac04fc86402c78a85c02a9f9d0.exe

Files

NEAS.f6863fac04fc86402c78a85c02a9f9d0.exe
.exe windows:4 windows x86

ae0a5112fe1176f4e5f6e1bc95e4c209

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

MessageBoxA

kernel32

FreeLibrary
lstrcatA
GetModuleFileNameA
ExitProcess
LoadLibraryA
GetProcAddress
lstrlenA

advapi32

RegQueryValueExA
RegCloseKey
RegOpenKeyExA

Sections

.text
Size: 1024B - Virtual size: 556B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 404B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ