NEAS[.]45d7388c2404a2a9003c5caa69f82410[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.45d7388c2404a2a9003c5caa69f82410.exe
Size

116KB
MD5

45d7388c2404a2a9003c5caa69f82410
SHA1

9650eff796da0403cae5d7f172684352af848d5d
SHA256

0e5f70f9dc759be373fa6d594109ca621d5605efde6b3d0d34ae72703c98a491
SHA512

cc2e6b6222d5dc3676715c28893adccd0124b30a5c8eba48afe32b7b33880f964368b57d895c11ae16dd4f054c767e51d01d82482fa7a45d734526e69712592e
SSDEEP

3072:K5Np2dlUX0+Cx17F8QRJZKmOK3outKZaB:sFwT7SMJMzUoSz

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.45d7388c2404a2a9003c5caa69f82410.exe

Files

NEAS.45d7388c2404a2a9003c5caa69f82410.exe
.exe windows:4 windows x86

ae0a5112fe1176f4e5f6e1bc95e4c209

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

MessageBoxA

kernel32

FreeLibrary
lstrcatA
GetModuleFileNameA
ExitProcess
LoadLibraryA
GetProcAddress
lstrlenA

advapi32

RegQueryValueExA
RegCloseKey
RegOpenKeyExA

Sections

.text
Size: 1024B - Virtual size: 556B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 404B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 109KB - Virtual size: 109KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ