NEAS[.]548eae15f243d76e4732e34a6d80a810[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.548eae15f243d76e4732e34a6d80a810.exe
Size

315KB
MD5

548eae15f243d76e4732e34a6d80a810
SHA1

3c11dbba29312050a22194e703d2e608cd051db0
SHA256

60505939725f20a55e9c1462b174e05920eaefde7a3a332a895aca06f247dda0
SHA512

9120139dc46c881e990f759126c0a98c820f1478583d3e4726adde27bcb95fc2bc4d1ae5208ac415998d97f5c8599e0b5210da89077b9f20914ef05d0e98ae2f
SSDEEP

6144:HIJsyBGAEiQPBVRzPivYJoBuYXb94oIMdd8vfZ50Mhibw4Oi6:BVAWNDTJHq9DIMTW8c1i6

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.548eae15f243d76e4732e34a6d80a810.exe

Files

NEAS.548eae15f243d76e4732e34a6d80a810.exe
.exe windows:5 windows x86

3b3ca5844bdb8b6b333c1e673e18f1c8

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleHandleA
GetProcAddress
VirtualAlloc
VirtualFree
VirtualProtect

user32

GetDC

advapi32

RegCloseKey

shell32

ShellExecuteW

ws2_32

gethostbyaddr

iphlpapi

GetAdaptersInfo

oleacc

LresultFromObject

gdi32

SaveDC

winspool.drv

OpenPrinterW

oleaut32

VariantClear

Sections

IOKGDTTY
Size: - Virtual size: 488KB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

IOKGDTTY
Size: 309KB - Virtual size: 312KB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE