NEAS[.]6a6c58f9fe00529578c6e42064a1dc40[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.6a6c58f9fe00529578c6e42064a1dc40.exe
Size

297KB
MD5

6a6c58f9fe00529578c6e42064a1dc40
SHA1

eb9a4ea063184a16bebaa9ebf7b9bb5110e29031
SHA256

08f6116048a09185ec4ff6bdd9b10f20d03e2c9686dee2f2634af6e1e9fa85b0
SHA512

ebb23e5252077fd37dc2d4ca19058503f3440df946422be5dc927f30acd3741281155c306625a73ad83a1c067e84df505be23cccf2a6e5b0d7e337a7e6c0c3b7
SSDEEP

6144:0RIOnicZ7tD7vy7rSxqewCcE3bRK3PTgvaOwXWlBtg/nL:0RImLSSYtxPUhR9g/nL

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.6a6c58f9fe00529578c6e42064a1dc40.exe

Files

NEAS.6a6c58f9fe00529578c6e42064a1dc40.exe
.exe windows:1 windows x86

eb85f9841caba6951fdea133fd00eec3

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
LoadLibraryA
RtlUnwind
lstrlenA
GetModuleHandleW
CloseHandle
GetCurrentProcess
GetStartupInfoW
GetLastError
lstrlenW
GetVersionExW
LoadLibraryW

crtdll

__GetMainArgs
exit
raise
signal

user32

SetForegroundWindow
LoadStringW
SendMessageW
MessageBoxW
DefWindowProcW

advapi32

RegOpenKeyExW
RegQueryValueExW
RegCloseKey

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 7KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 179KB - Virtual size: 179KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 988B - Virtual size: 988B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ