NEAS[.]e714246801e74612fb7145aaf7e9bb50[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.e714246801e74612fb7145aaf7e9bb50.exe
Size

2.9MB
MD5

e714246801e74612fb7145aaf7e9bb50
SHA1

947c51a80714d6cf22807998eba2f537be725772
SHA256

a04009ed14ab0e921c0fd966747778a1e5b8390be3938797f52c3d902506c6e9
SHA512

1be26f08909d6e6c9ca429c161394963e4f79f86caf5aebf081895f59cd95ebb7988ba3d1c32e56dee2fa8287f71b39d1157ff5aa78bf430ea695a7bffc4fed9
SSDEEP

49152:R57zbf4PlRlJPVBOcd1Qr5J5sFUU8CdZHP5gPStz7lyk7Quguv2oag+z+FOR:bvbfCJNBOcw28CdZHP5gPStz7lyk7Qu2

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.e714246801e74612fb7145aaf7e9bb50.exe

Files

NEAS.e714246801e74612fb7145aaf7e9bb50.exe
.exe windows:5 windows x86

2b0f8ec1cd19455332e3bb8050ffefdf

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

TerminateProcess

user32

GetForegroundWindow

gdi32

GetTextMetricsA

winmm

midiOutReset

winspool.drv

ClosePrinter

advapi32

RegOpenKeyExA

shell32

ShellExecuteA

ole32

OleUninitialize

oleaut32

RegisterTypeLi

comctl32

ImageList_Destroy

ws2_32

inet_ntoa

comdlg32

GetFileTitleA

msvcrt

strncpy

iphlpapi

GetInterfaceInfo

psapi

GetMappedFileNameW

Sections

.text
Size: 1.7MB - Virtual size: 1.7MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sedata
Size: 1.2MB - Virtual size: 1.2MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.idata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.sedata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ