NEAS[.]d7b8b09755f236757fe1bb0099b4b1a0[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.d7b8b09755f236757fe1bb0099b4b1a0.exe
Size

465KB
MD5

d7b8b09755f236757fe1bb0099b4b1a0
SHA1

9dc29dfd2fec61fbd7a9bb0cd9c809011f5321cd
SHA256

188c737a335569eef7673e63001051f74c7ce04b4483893cd27c07df406bd08b
SHA512

9602d61c191245b3136cca6520e837b400562272d42d69358c5673aaec1a8fd2d39c434d0bb1265f43da1d38361c760860ae94f39a4c3dab079e4c2907972813
SSDEEP

6144:FakMYQz+NP3DGEEaC56dsYHMsktMqeCvNS842TiepKNH/vMTHgEqUF5+gei9Drlr:clYQ61zGEEaCsTmC8VYH/vMhbFMw9DJ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.d7b8b09755f236757fe1bb0099b4b1a0.exe

Files

NEAS.d7b8b09755f236757fe1bb0099b4b1a0.exe
.dll regsvr32 windows:4 windows x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

DebugConnectWide
DebugCreate
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
KSFFInit
KSFFUninit
KSInit
KSOptions
KSPromptForKey
KSSetKeyInfo
KSSetOption
KSUninit
KSUpdate
curl_easy_cleanup
curl_easy_init
curl_easy_perform
curl_easy_setopt

Sections

CODE
Size: 383KB - Virtual size: 383KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 509B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 28KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 37KB - Virtual size: 37KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ