NEAS[.]265fe8653b4be8640aa0ee792e7ac190[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.265fe8653b4be8640aa0ee792e7ac190.exe
Size

39KB
MD5

265fe8653b4be8640aa0ee792e7ac190
SHA1

6a4b47ebe3cc66b10c032b981a6d15a5af7d1e21
SHA256

51a34b29fc28bb71ddc64c4bc7f5f5b451a5824064e34635461a3af5eae29c8d
SHA512

a5c8a59922ad4afe1f979a81bcb6065a5cde48118d4b606d5c46a46d5b8f980b0ff95f88af0ad30473c7440ab6472333aa2578aab3b0df94ebbd040f76c49762
SSDEEP

384:4K1MqsQWRREHZbNwAPEa+NxEeE0BllOC1YZYkjrbC:4K1MqshRS2+EPdD9Bkja

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.265fe8653b4be8640aa0ee792e7ac190.exe

Files

NEAS.265fe8653b4be8640aa0ee792e7ac190.exe
.exe windows:5 windows x86

b1decad0f067131fff2e76ab43787f60

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_ISOLATION
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

wininet

HttpOpenRequestW
InternetConnectW
HttpSendRequestW
InternetReadFile
InternetCloseHandle
InternetOpenW

kernel32

ReadFile
SleepEx
GetCurrentDirectoryW
HeapFree
FreeLibrary
GetProcAddress
GetModuleHandleW
HeapCreate
HeapAlloc
GetModuleFileNameW
GetTempPathW
CreateFileW
GetFileSize
lstrlenW
ExitProcess
DeleteFileW
lstrcmpW
WriteFile
CloseHandle
LoadLibraryW

user32

wsprintfW

shell32

ShellExecuteW

Sections

.text
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 8B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 488B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 140B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ