NEAS[.]b01fff852ca250a0f2c36617992629e0[.]exe | Triage

Sharing

General

Target

NEAS.b01fff852ca250a0f2c36617992629e0.exe
Size

145KB
MD5

b01fff852ca250a0f2c36617992629e0
SHA1

15e48aeb7cfc096deef3831da37fd412d3fb4862
SHA256

d148c716756eb2bc3c5c4bc464bb734f20463a91553f628683c1a56e94a872cc
SHA512

5e2761cb1c5166110db4f51e2f5271fe6f8110928f99bf171a22cfcf1083af333cbeed9fafd12f0ec1f5348ff4ccd848f79c9af377638e065e38b8b63d93400f
SSDEEP

3072:+apQLsjnOYOKOpGQ2ly+4yHyisr7O8CMFPv3yJDUKb80vn:+aIsfQ28+4R7T5vrsXn

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.b01fff852ca250a0f2c36617992629e0.exe

Files

NEAS.b01fff852ca250a0f2c36617992629e0.exe
.exe windows:1 windows x86

4652f05a6513d6d38cb0d015939cf207

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetLastError
GetProcAddress
CloseHandle
GetTempPathA
GetVersionExA
LoadLibraryA
RtlUnwind
CreateFileA
VirtualProtect
GetModuleHandleW
GetStartupInfoW
lstrlenW
LoadLibraryW
VirtualQuery
WriteFile
UnhandledExceptionFilter
GetCommandLineW
GetVersionExW
ExitProcess
GetStdHandle
GetModuleFileNameW
FreeEnvironmentStringsW

crtdll

__GetMainArgs
exit
raise
signal

user32

EnableMenuItem
LoadIconW
LoadStringW
SendMessageW
MessageBoxW
GetClientRect
InvalidateRect
DefWindowProcW
LoadCursorW
PostMessageW
DispatchMessageW
CreateWindowExW

advapi32

RegOpenKeyExW
RegSetValueExW
RegQueryValueExW
RegCloseKey
NotifyBootConfigStatus

Sections

.text
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 130KB - Virtual size: 364KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 378B - Virtual size: 378B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc1
Size: 214B - Virtual size: 214B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE