NEAS[.]d99df7862a59898db2e4200d4691fd30[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.d99df7862a59898db2e4200d4691fd30.exe
Size

200KB
MD5

d99df7862a59898db2e4200d4691fd30
SHA1

cbad5407560798b8d7987b8677f3e2ae8b139e51
SHA256

eff4f1d3ee14e14654ee904a7bdf1d70dbf2295116a113b2fd4c924ee4469fdd
SHA512

7844313436b122d8d8a5ca7270477acadce510840eeb74b7e0a8170acbb73f660455718aac062f19cde308ee290ae5ef13f6e3ec619054ddfada747ee48e238a
SSDEEP

768:JCJgi9ume2fe2aCJgi9ume2fe2Ze2fe2aCJgi9uvtP4iht7UJQ+IKJ92fuYtNEFb:JCe3CePCegiH8I62fuAyjBic

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.d99df7862a59898db2e4200d4691fd30.exe

Files

NEAS.d99df7862a59898db2e4200d4691fd30.exe
.exe windows:4 windows x86

d66b543d0999c7628a55690ef9b1c96e

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

advapi32

RegCloseKey
RegOpenKeyExA
RegSetValueExA

kernel32

AddAtomA
CloseHandle
CopyFileA
CreateThread
ExitProcess
FindAtomA
FindFirstFileA
FindNextFileA
GetAtomNameA
GetCommandLineA
GetModuleFileNameA
GetModuleHandleA
GetStartupInfoA
GetSystemDirectoryA
SetUnhandledExceptionFilter
Sleep

msvcrt

__getmainargs
__p__environ
__p__fmode
__set_app_type
_cexit
_iob
_onexit
_setmode
abort
atexit
exit
fclose
fflush
fopen
fprintf
fread
free
fseek
ftell
fwrite
malloc
rand
signal
sprintf
strcat
strcmp
strlen

shell32

ShellExecuteA

user32

GetForegroundWindow
SendMessageA
SetWindowTextA

Sections

.text
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 128B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 1024B - Virtual size: 752B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 496B

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE