NEAS[.]347da1514bf7a35faeb4317772d0ec10[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.347da1514bf7a35faeb4317772d0ec10.exe
Size

143KB
MD5

347da1514bf7a35faeb4317772d0ec10
SHA1

e94c4b06d6d517b5e24f4dae040187cadf9d3eef
SHA256

98c4c33c0b4729b83e83c138824e8a17a5e13703854e3c1b860071d9d0b8e7d0
SHA512

680cb523761bdc1eb97563b07bc6f86251a150df92ae1c1a2d0f31323d5ab9c9601405ea78672d0d9cabe5ddbfe84b85d9534fcd195ea8f0d1103aacf57f14a9
SSDEEP

3072:f7HFG5cs4BI0badfwDbvCj46KM2mbeR6llQt3IsKQkKtbVTGl:Tl4UPDjaYidzQpZKQkKt0l

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.347da1514bf7a35faeb4317772d0ec10.exe

Files

NEAS.347da1514bf7a35faeb4317772d0ec10.exe
.exe windows:1 windows x86

a2b360ce02dd3848e4bbe1fe37c4c5ef

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

crypt32

CryptBinaryToStringA

kernel32

GetModuleHandleA
GetProcAddress
LoadLibraryA
RtlUnwind
VirtualProtect
GetACP
WriteFile
UnhandledExceptionFilter
GetStartupInfoA
GetLastError
GetCommandLineA
GetVersionExA
GetStdHandle
GetModuleFileNameA
FreeEnvironmentStringsA
MultiByteToWideChar
LCMapStringA
WideCharToMultiByte
GetLocaleInfoA
GetStringTypeA
CloseHandle
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
TerminateProcess

crtdll

__GetMainArgs
exit
raise
signal

advapi32

GetAclInformation
RegOpenKeyExA
RegSetValueExA
RegCreateKeyExA
RegQueryValueExA
RegCloseKey

Sections

.text
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 131KB - Virtual size: 131KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idat
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 282B - Virtual size: 282B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ