NEAS[.]7c8675199e9beac77ab469b1e752e110[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.7c8675199e9beac77ab469b1e752e110.exe
Size

68KB
MD5

7c8675199e9beac77ab469b1e752e110
SHA1

dafa51cb83a3582e0cbfd5e6f3ebb9581c3942b0
SHA256

25fca0b02c8f94771c539c990a760d29136c7eb8f874c334a70cfa5f4394bd56
SHA512

8df0a23e1b4d2c2f59930356c89ba0ecbda761c46fc29ab619cd0f6537268ba98e3c57644fdef90e57ab5d98abe2d3d6706e0aa47fa6f607c841decd21784ad4
SSDEEP

1536:g0C0XSgWeruhR9OCHY5zHGhewyHxDMa0GG4:FCoS8CTHY5zG4FHxDJRt

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.7c8675199e9beac77ab469b1e752e110.exe

Files

NEAS.7c8675199e9beac77ab469b1e752e110.exe
.exe windows:4 windows x86

3e88f0e8ccd8d511ea7eed8b6ec9e643

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

uniansi

FormatMessageW
GetModuleFileNameW
lstrcpyW
LoadStringW

kernel32

GetUserDefaultLangID
GetModuleHandleA
GetStartupInfoA
MultiByteToWideChar
lstrlenA
lstrcmpA

user32

MessageBoxW

ole32

CoInitialize
CLSIDFromProgID
CoCreateInstance
CoUninitialize

oleaut32

SysAllocStringLen
SysAllocString
SysFreeString

msvcrt

_controlfp
_except_handler3
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__getmainargs
exit
_exit
_acmdln
_XcptFilter

Sections

.text
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 53KB - Virtual size: 54KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

rgkklpp
Size: - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE