NEAS[.]41f4442301d869cc8038ad8fccb01f10[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.41f4442301d869cc8038ad8fccb01f10.exe
Size

17KB
MD5

41f4442301d869cc8038ad8fccb01f10
SHA1

b1112624799c8992ac9b39a543d8e4a256c74da1
SHA256

60a33e3ec34bf6ee2da05b19ffa6951e9a507f367c2cfc48fe20e5395fa34d5b
SHA512

33f47f00a673eaee0413ad7396c351f178184619459f946d7eaca17f1bfbe172fb0b6968550f4fa2d92c695f979190ede30cfc88ced7b12aa67464562f80bd83
SSDEEP

384:CqhU1sjnJnXhB9UeAE9XiX/1uAnx4SgDBjnJa:VwsZRHUeAE9yjnYB4

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.41f4442301d869cc8038ad8fccb01f10.exe

Files

NEAS.41f4442301d869cc8038ad8fccb01f10.exe
.exe windows:4 windows x86

ae0a5112fe1176f4e5f6e1bc95e4c209

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

MessageBoxA

kernel32

FreeLibrary
lstrcatA
GetModuleFileNameA
ExitProcess
LoadLibraryA
GetProcAddress
lstrlenA

advapi32

RegQueryValueExA
RegCloseKey
RegOpenKeyExA

Sections

.text
Size: 1024B - Virtual size: 556B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 404B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ