NEAS[.]75ce1bba5e43c255c97f371d094c1f10[.]exe | Triage

Sharing

General

Target

NEAS.75ce1bba5e43c255c97f371d094c1f10.exe
Size

76KB
MD5

75ce1bba5e43c255c97f371d094c1f10
SHA1

d494a13bbba7776d3a8cf3054b095b7a58d1d960
SHA256

1a7b0478dfad6149468dd7d06f056ccb99ee40adcb7d9a2ba7800fd3bad3d234
SHA512

522ab60754c07b2a637c65b51883701ba693a771e1c59fabc824edb03e5ec910800de6b59a9f091915be82137df39170155e92ec46890c49cb4aa6e077f80eba
SSDEEP

1536:xUvehYluwSY+A37feaCMJDmYsLIb4PvYqHB/AdGC:xM1luwSDADeak7dJHB/AdGC

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.75ce1bba5e43c255c97f371d094c1f10.exe

Files

NEAS.75ce1bba5e43c255c97f371d094c1f10.exe
.exe windows:4 windows x86

0dea629869ec0fb1dbc593121b850a5f

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

RegOpenKeyExA
RegCloseKey

shlwapi

SHDeleteKeyA

kernel32

GetStringTypeW
GetStringTypeA
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
HeapFree
RtlUnwind
WriteFile
GetCPInfo
GetACP
GetOEMCP
HeapAlloc
VirtualAlloc
HeapReAlloc
GetProcAddress
LoadLibraryA
MultiByteToWideChar
LCMapStringA
LCMapStringW

Sections

.text
Size: 16KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 52KB - Virtual size: 49KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE