NEAS[.]8930746b2f0c52a72f232418503f2390[.]exe | Triage

Sharing

General

Target

NEAS.8930746b2f0c52a72f232418503f2390.exe
Size

121KB
MD5

8930746b2f0c52a72f232418503f2390
SHA1

dc5ae69a96907745d5219af5a53b2e8ebd458cf0
SHA256

0d5a02333ad55d684fd2f16b8828fd0bf52439607a6fb8415868b9305f67bf06
SHA512

05e047aa542cb64243ebf8b5d9c8d175f12534a9d2dfc5a02a710d9a5734b1f2017330e8f5f35a70238b7964e12aab0c223b575f8b9259144f94690eb3303531
SSDEEP

1536:9YckrPAoIaoYNhCZ2VwPsZZLbTbVlyO2ntg7sUdr8:wVFoGEZ2+0Hb/VlR2ty7e

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.8930746b2f0c52a72f232418503f2390.exe

Files

NEAS.8930746b2f0c52a72f232418503f2390.exe
.exe windows:4 windows x86

25f2377f5488df64274c672dfad890c6

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
LoadLibraryA
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
HeapAlloc
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
HeapFree
RtlUnwind
WriteFile
VirtualAlloc
HeapReAlloc
GetCPInfo
GetACP
GetOEMCP
MultiByteToWideChar
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW

Sections

.text
Size: 18KB - Virtual size: 17KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 10KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 40KB - Virtual size: 40KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ