NEAS[.]c6f12a6a82fccf2d4440c4be6b8c99e0[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.c6f12a6a82fccf2d4440c4be6b8c99e0.exe
Size

340KB
MD5

c6f12a6a82fccf2d4440c4be6b8c99e0
SHA1

1691fa0ae94204b06c51412fec57e2c5b1f53c25
SHA256

dca5a63b11c6f9a09c94e3d2c938d5ce7ab91e4eb78339987df04e9e4902f0d3
SHA512

d32297e3b12649bbef7c915f5967b78794182e9883da749795db573305bbb4e59bab992b9e6907436b10af4d6760c158a5bd8db0c532c57e5ef0aa827bc58606
SSDEEP

6144:DX+psoWJ+IvLI7BziS3qoJGd2GexPZmxMcVp0XpV:ymoWkI094og2GgPZkiv

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.c6f12a6a82fccf2d4440c4be6b8c99e0.exe

Files

NEAS.c6f12a6a82fccf2d4440c4be6b8c99e0.exe
.exe windows:5 windows x86

3b3ca5844bdb8b6b333c1e673e18f1c8

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleHandleA
GetProcAddress
VirtualAlloc
VirtualFree
VirtualProtect

user32

GetDC

advapi32

RegCloseKey

shell32

ShellExecuteW

ws2_32

gethostbyaddr

iphlpapi

GetAdaptersInfo

oleacc

LresultFromObject

gdi32

SaveDC

winspool.drv

OpenPrinterW

oleaut32

VariantClear

Sections

IOKGDTTY
Size: - Virtual size: 484KB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

IOKGDTTY
Size: 326KB - Virtual size: 328KB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE