NEAS[.]a854b173ef947372039a214aef7a1ac0[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.a854b173ef947372039a214aef7a1ac0.exe
Size

1.5MB
MD5

a854b173ef947372039a214aef7a1ac0
SHA1

9afad674376aca0b4678d24aca52c55155fc2c36
SHA256

1a5a8b4d1a6c05b00b9bebc49bfadfedf7192140657a6d411ae255e1ab3c2271
SHA512

8089b9c7a48373420902de4206d6dc39da6ec769b938b5c14e7e00a8d58e3b8c770510500182fd299ca3a29e334d4d62d2850896423026ca5b3cab4fe6b2c9f9
SSDEEP

24576:b0wZlwbxACp5I+Lu7I06cVcb5AbkAdOTD6kewXTHaquQ56oj+4bpg5MUHL:1lEjp5IqaI0lcmo+O36kJHaH4tir

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.a854b173ef947372039a214aef7a1ac0.exe

Files

NEAS.a854b173ef947372039a214aef7a1ac0.exe
.exe windows:4 windows x86

746c04dc90a219439dde8ef0679b4701

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateFileA
CreateFileW
GetModuleFileNameA
GetModuleFileNameW
CreateDirectoryA
GetTempPathA
CreateDirectoryW
GetTempPathW
GetModuleHandleA
LoadLibraryA
LoadLibraryW
GetVersionExA
GetLastError
CloseHandle
WriteFile
LockResource
LoadResource
SizeofResource
FindResourceA
SetFileAttributesW
GetFileAttributesW
GetProcAddress
GetStartupInfoA

user32

wsprintfW

ole32

OleInitialize
OleUninitialize

msvcrt

_exit
??3@YAXPAX@Z
sprintf
wcslen
_ftol
wcscat
??2@YAPAXI@Z
calloc
free
_except_handler3
_XcptFilter
exit
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_controlfp

Sections

.text
Size: 16KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 80KB - Virtual size: 78KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ