NEAS[.]feebca8a2be9f2dac08f287a953fef70[.]exe | Triage

Sharing

General

Target

NEAS.feebca8a2be9f2dac08f287a953fef70.exe
Size

339KB
MD5

feebca8a2be9f2dac08f287a953fef70
SHA1

154bee8c436b6efc4e4bcf141186a0f1a91cc5b9
SHA256

5c9b87baf889e117ebda30f215966466d3aeba989c63d973c06924126531425b
SHA512

2fa13c692d634d328ef885cc787c7c99b29cba4ee360f90df14930bd1b0e3b5c83f565e4750158d10ffed4e0dcbb8c22e73b1f3484ef3f0ba24bf3bee2072d81
SSDEEP

6144:DX+psoWJ+IvLI7BziS3qoJGd2GexPZmxMcVp0XpAv:ymoWkI094og2GgPZkiu

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.feebca8a2be9f2dac08f287a953fef70.exe

Files

NEAS.feebca8a2be9f2dac08f287a953fef70.exe
.exe windows:5 windows x86

3b3ca5844bdb8b6b333c1e673e18f1c8

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleHandleA
GetProcAddress
VirtualAlloc
VirtualFree
VirtualProtect

user32

GetDC

advapi32

RegCloseKey

shell32

ShellExecuteW

ws2_32

gethostbyaddr

iphlpapi

GetAdaptersInfo

oleacc

LresultFromObject

gdi32

SaveDC

winspool.drv

OpenPrinterW

oleaut32

VariantClear

Sections

IOKGDTTY
Size: - Virtual size: 484KB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

IOKGDTTY
Size: 326KB - Virtual size: 328KB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE