NEAS[.]2d31662e7246bd362b2047de3958bb30[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.2d31662e7246bd362b2047de3958bb30.exe
Size

137KB
MD5

2d31662e7246bd362b2047de3958bb30
SHA1

3d3345cd3bf6bb8fb55f4d91a66a9930249e676b
SHA256

4da879d77fbbebb4be4c3d1af447b041bfe2a56b5fac07a1c63fe3e9f444293e
SHA512

d27a756f2deb198e0ab2111727e1fc251d95384f438b40b6d22d57e6baaf7121a4802b2cf1c5c232e7201805418bc86bb4ef06eeb86b31c4e631ce4ca2b9b2f8
SSDEEP

1536:s1baYkjUIKECOmxUNKwhB+GT/4I2fm3w9Rri+pXmf8t1dn4vcjeRs:sjIKn1xUswhsGTgI23RGUXmUDx

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.2d31662e7246bd362b2047de3958bb30.exe

Files

NEAS.2d31662e7246bd362b2047de3958bb30.exe
.exe windows:5 windows x86

99d5d54226d07fdab82543b1f9742b22

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleHandleA
GetProcAddress
VirtualAlloc
VirtualFree
VirtualProtect

user32

GetDC

advapi32

RegCloseKey

shell32

ShellExecuteW

ws2_32

gethostbyname

iphlpapi

GetAdaptersAddresses

oleacc

LresultFromObject

gdi32

SaveDC

winspool.drv

OpenPrinterW

oleaut32

VariantClear

Sections

.text
Size: 72KB - Virtual size: 140KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 12KB - Virtual size: 29KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 4KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 47KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 8KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

MOJSFDRR
Size: 27KB - Virtual size: 28KB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE