NEAS[.]3d4439cae8b81a2d1e75591b02d9b9b0[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.3d4439cae8b81a2d1e75591b02d9b9b0.exe
Size

91KB
MD5

3d4439cae8b81a2d1e75591b02d9b9b0
SHA1

56c227554873e316da3abee7256da1bece06c399
SHA256

efa174021bc7ceab617d15fdee95fbe5f9a36ec7b21a2449ab7ee63c417aab35
SHA512

dbcbc7e3ffe3eb6a4824a9269ceb26b95398c5f78251333e19b3b52e3182104252906d75413a51d371a7854d1e159e262d14f67923f7eaf52e43db27df009162
SSDEEP

1536:nbjAzTgRGRMauMt5cRWAmO3ubNjZSJwGMQwBzGj5BE6laq4OXtmYw7077gEsZ:bcz8VMt5cRDmNlQwKOzoaqTmY6AcB

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.3d4439cae8b81a2d1e75591b02d9b9b0.exe

Files

NEAS.3d4439cae8b81a2d1e75591b02d9b9b0.exe
.exe windows:4 windows x86

ae0a5112fe1176f4e5f6e1bc95e4c209

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

MessageBoxA

kernel32

FreeLibrary
lstrcatA
GetModuleFileNameA
ExitProcess
LoadLibraryA
GetProcAddress
lstrlenA

advapi32

RegQueryValueExA
RegCloseKey
RegOpenKeyExA

Sections

.text
Size: 1024B - Virtual size: 556B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 404B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 84KB - Virtual size: 84KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ