NEAS[.]0a742465c4378976153dcf29dea43920[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.0a742465c4378976153dcf29dea43920.exe
Size

1.8MB
MD5

0a742465c4378976153dcf29dea43920
SHA1

bcc312f4252056f4fcc389dfe8faf80663674eaa
SHA256

1d1adf901a1f69170bf2e71d1010d335be1b5d8624c42dd3ea4568428e98a09a
SHA512

d9b9c1586146e913f8937f0b8d0c32e46fbab56c91c35241ff4fe29332cc0f19d169eafbd1998ab8ac98aba7007928e4805bdc92bc2fc3ed9ea474b293fea5b4
SSDEEP

49152:8kYwbf7W+qkNKBeSHPwdo6X+RaCg6FFZO:rD7nNKoSvwe6WVgSbO

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.0a742465c4378976153dcf29dea43920.exe

Files

NEAS.0a742465c4378976153dcf29dea43920.exe
.exe windows:5 windows x86

9182cd5764d07724c3268e32254e3af9

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SetCurrentDirectoryA

user32

OpenClipboard

gdi32

CreateEllipticRgnIndirect

winmm

midiStreamRestart

msimg32

GradientFill

winspool.drv

DocumentPropertiesA

advapi32

RegOpenKeyExA

shell32

SHGetSpecialFolderPathA

ole32

CLSIDFromProgID

oleaut32

VariantInit

comctl32

_TrackMouseEvent

ws2_32

accept

comdlg32

ChooseColorA

msvcrt

__dllonexit

psapi

GetMappedFileNameW

Sections

.text
Size: 360KB - Virtual size: 860KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sedata
Size: 1.3MB - Virtual size: 1.3MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.idata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 92KB - Virtual size: 92KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.sedata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ