NEAS[.]3c24df6d4c8be8ebacf693e1739ba200[.]exe | Triage

Sharing

General

Target

NEAS.3c24df6d4c8be8ebacf693e1739ba200.exe
Size

7KB
MD5

3c24df6d4c8be8ebacf693e1739ba200
SHA1

e620e05a8b63b787ed6dae48ab8126d0b03b1606
SHA256

4977f355daa4ac0b24d71aee01c4b64e086df7a26692edd10127a770c09137a9
SHA512

b2b3e740280b60febac63b36f0fca564877607acbbb68e536c0a4bc09afc3c7960c75e3cf0d63fb799aa6cffc3a20100dd06eedf9459244c998cea4aa57c7b4c
SSDEEP

96:ZSign/x6z0AjDXX6Hb3R51nKymV44hjDErqG/giGJJgM0sFZSWzW9MDbW5v8PzzE:oii5qDXX6d51nKfzzNg6FHDbfYQbSnv

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.3c24df6d4c8be8ebacf693e1739ba200.exe

Files

NEAS.3c24df6d4c8be8ebacf693e1739ba200.exe
.exe windows:4 windows x86

cc40fefa3af5cd00cc28dbd874038a4d

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CloseHandle
CreateFileW
DeleteFileW
ExitProcess
GetComputerNameW
GetCurrentDirectoryW
GetFileSize
GetModuleFileNameW
GetTempPathW
GetVersionExW
ReadFile
WriteFile
lstrlenW
lstrcmpW
SleepEx
VirtualAlloc

wininet

HttpOpenRequestW
HttpSendRequestW
InternetOpenW
InternetConnectW
InternetCloseHandle
InternetReadFile

shell32

ShellExecuteW

ntdll

RtlDecompressBuffer
swprintf

Sections

.text
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 988B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ