NEAS[.]3d11543a3f814747d48012d8764f2820[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.3d11543a3f814747d48012d8764f2820.exe
Size

76KB
MD5

3d11543a3f814747d48012d8764f2820
SHA1

c3ec3a47fbbde21e02c73ad74ac8a64a89cd6b25
SHA256

3fbcd0847f16d53fc28978017233dd0cbb0a4ad3db46ad517ef5762996fae58c
SHA512

f045a921e9007a61a150e058f7fe454e23f95fcbee2984f58b17c67cdc1e779d62bb6707f897fdd5e96e2e0fbc111a541421e7cfe0055320c78cac3fca73f9e8
SSDEEP

1536:WMYTpopojmUSY+A37feaCMJDmYsLIb4PvYqHB/AfX:eTipojmUSDADeak7dJHB/A/

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.3d11543a3f814747d48012d8764f2820.exe

Files

NEAS.3d11543a3f814747d48012d8764f2820.exe
.exe windows:4 windows x86

238b277f838f7ca1d50b5079cb2d277f

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleFileNameA
SetHandleCount
HeapCreate
HeapDestroy
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
lstrlenA
GetStdHandle
GetFileType
GetStringTypeA
GetStringTypeW
VirtualFree
HeapFree
RtlUnwind
WriteFile
GetCPInfo
GetACP
GetOEMCP
HeapAlloc
VirtualAlloc
HeapReAlloc
GetProcAddress
LoadLibraryA
MultiByteToWideChar
LCMapStringA
LCMapStringW

advapi32

RegCreateKeyExA
RegSetValueExA
RegCloseKey

shell32

ShellExecuteA

Sections

.text
Size: 12KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 52KB - Virtual size: 49KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ