NEAS[.]6aff988621b28a3aeb8f357f5a726ec0[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.6aff988621b28a3aeb8f357f5a726ec0.exe
Size

28KB
MD5

6aff988621b28a3aeb8f357f5a726ec0
SHA1

a464947f5fe7aec0319db8e71ee99e2e4b9bfbb2
SHA256

e9701faf07cf1cb2a618d234855c17ed6329639f0f25b2b77858e0a5accb033f
SHA512

9e3ff7178c1683190222ac974f95296b4e972bf9e66b29510fe283f6dd49a71acdb886d59ae5dc5211b5d03ca9d18935a7a781e6ea1725edca4576bccef208ac
SSDEEP

384:U4H4zrETIlpaYv696tOLq0DeeqVsdEQktgDj5ggAAXo2ZhfhKGZ:/YzEI7aYv6N3a5smptK5VX1/fMm

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.6aff988621b28a3aeb8f357f5a726ec0.exe

Files

NEAS.6aff988621b28a3aeb8f357f5a726ec0.exe
.exe windows:4 windows x86

8154af1ad3da1ac3c8e822c46a63f919

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ExitProcess
VirtualAlloc
CloseHandle
CreateFileW
DeleteFileW
GetFileSize
GetModuleFileNameW
GetTempPathW
GetCurrentDirectoryW
ReadFile
WriteFile
lstrlenW
lstrcmpW
SleepEx
GetProcAddress
LoadLibraryA

user32

wsprintfW

wininet

InternetOpenW
InternetConnectW
HttpOpenRequestW
HttpSendRequestW
InternetCloseHandle
InternetReadFile

shell32

ShellExecuteW

Sections

.text
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 970B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ