NEAS[.]f05590be05108e60b3307e335ad66eb0[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.f05590be05108e60b3307e335ad66eb0.exe
Size

144KB
MD5

f05590be05108e60b3307e335ad66eb0
SHA1

24fb351da3d5db9ceb3b6eb48e5d264fe25283c3
SHA256

d61f98b14d7369d24b7ac7e27b03c564f409333e6c0ebefa5aded30c9d486782
SHA512

39449fc4df36789462d090dd33e2fc647ffbc2916ffe8591adbd7b9e450f9c21db0a554d7e51305fc2342fc1d38b1eba29d0b959e6a2cdd9d4245a60fcdabefa
SSDEEP

3072:MHLG6Xkuwh2ntk2LzSV0aKs6FNdeufWT+Z82YYixDbNSxYi4XIpXuoN3:MrGGS2ntkY1FNZuyq2eDbf4pXuo9

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.f05590be05108e60b3307e335ad66eb0.exe

Files

NEAS.f05590be05108e60b3307e335ad66eb0.exe
.exe windows:1 windows x86

3d289df6b9c7102d3e84d76e331f7894

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

iphlpapi

GetAdaptersInfo

kernel32

GetModuleHandleA
GetProcAddress
CloseHandle
RtlUnwind
GetLastError
MultiByteToWideChar
WideCharToMultiByte
FreeLibrary
GetStartupInfoA
lstrlenA
LoadLibraryA

crtdll

__GetMainArgs
exit
raise
signal

ntdll

NtWaitForSingleObject

wininet

InternetQueryOptionA

gdi32

SetPixel
BitBlt
CreateCompatibleBitmap
SelectObject
DeleteObject
CreateCompatibleDC
DeleteDC
GetDeviceCaps

advapi32

RegOpenKeyExA
RegQueryValueExA
RegCloseKey

user32

LoadIconA
LoadStringA
SendMessageA
MessageBoxA
GetClientRect
InvalidateRect
EndPaint
BeginPaint
LoadCursorA
PostMessageA
DispatchMessageA

Sections

.text
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 129KB - Virtual size: 129KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 338B - Virtual size: 338B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ