NEAS[.]2e998bc587db4043fb3e727c5d10f3f0[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.2e998bc587db4043fb3e727c5d10f3f0.exe
Size

340KB
MD5

2e998bc587db4043fb3e727c5d10f3f0
SHA1

10084ac5998f646a9ba5cf527dd8d8edebc470e3
SHA256

3dc2213be4a547abde279e032f90555f55313cf24cd0874e9c70a58bdff57568
SHA512

f59c27e61d010aedbb09218b0db9500a9f11165457f0073e81cc9c5e0d9c956a36fd565f597be7365b1ff1614bd07fe5a2c7d44633748941e832c726f0f5d4f7
SSDEEP

6144:DX+psoWJ+IvLI7BziS3qoJGd2GexPZmxMcVp0XpR:ymoWkI094og2GgPZkiz

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.2e998bc587db4043fb3e727c5d10f3f0.exe

Files

NEAS.2e998bc587db4043fb3e727c5d10f3f0.exe
.exe windows:5 windows x86

3b3ca5844bdb8b6b333c1e673e18f1c8

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleHandleA
GetProcAddress
VirtualAlloc
VirtualFree
VirtualProtect

user32

GetDC

advapi32

RegCloseKey

shell32

ShellExecuteW

ws2_32

gethostbyaddr

iphlpapi

GetAdaptersInfo

oleacc

LresultFromObject

gdi32

SaveDC

winspool.drv

OpenPrinterW

oleaut32

VariantClear

Sections

IOKGDTTY
Size: - Virtual size: 484KB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

IOKGDTTY
Size: 326KB - Virtual size: 328KB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE