NEAS[.]241e463c07cc95ba851bdcbad8cf5410[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.241e463c07cc95ba851bdcbad8cf5410.exe
Size

22KB
MD5

241e463c07cc95ba851bdcbad8cf5410
SHA1

f7f699c3256567f4fff668188c6e0eff66c04e44
SHA256

7a43ff1aa9bf8fa88c6cc38b62f2ee488299ee88508fcdde841a806c80041975
SHA512

f0a952edfcde604e3c236f601da36bb8dacfe3cbefc7cc076211744edc3d84314ea921c95c4dfadb00b4427a7cab2c1508b5a586273e42bae23e9a62ea175db6
SSDEEP

192:4idZQ/nS2a9lm/ij5z3CtlNiF3elc9wOw3n17mXOTU3dGosWP/Z4CqlXlzmMWvw:4Yn28lm/ij5PFUcLCWOTUNGgB9qiXvw

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.241e463c07cc95ba851bdcbad8cf5410.exe

Files

NEAS.241e463c07cc95ba851bdcbad8cf5410.exe
.exe windows:4 windows x86

8b952403cd7980f20cd10a1500bc5902

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

ole32

StgOpenStorage
CoInitialize

kernel32

RaiseException
HeapSetInformation
GetCurrentProcess
UnhandledExceptionFilter
GetTickCount
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCurrentProcessId
QueryPerformanceCounter
GetModuleHandleA
SetUnhandledExceptionFilter
InterlockedCompareExchange
InterlockedExchange
Sleep
TerminateProcess

advapi32

CredFree

dhcpcsvc

DhcpDeRegisterParamChange

Sections

.text
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1024B - Virtual size: 744B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ