NEAS[.]272d9a55af3da669921a39fdcafa0e00[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.272d9a55af3da669921a39fdcafa0e00.exe
Size

140KB
MD5

272d9a55af3da669921a39fdcafa0e00
SHA1

f1d6e99a211827430f78ede837677bf7b5661c69
SHA256

70b33245cc7be54f5bb7d1ecba7eb9c5b3ccc06639288e9e2eee38a3a2862c4c
SHA512

989cdd96d989d46e067a5541fe608968d2cf60248be6ad0234339a9bce99a8970f64e773f01c9d7ada70df1fa11eb11fe3cf999f9fc34b637f9b81296c19788b
SSDEEP

3072:VUhMsp+K1OXZjftqRO6DL/qHR4oBvsA7Ipr308dU4GX:VUhAOOt84Rh9KEi2X

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.272d9a55af3da669921a39fdcafa0e00.exe

Files

NEAS.272d9a55af3da669921a39fdcafa0e00.exe
.exe windows:5 windows x86

99d5d54226d07fdab82543b1f9742b22

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleHandleA
GetProcAddress
VirtualAlloc
VirtualFree
VirtualProtect

user32

GetDC

advapi32

RegCloseKey

shell32

ShellExecuteW

ws2_32

gethostbyname

iphlpapi

GetAdaptersAddresses

oleacc

LresultFromObject

gdi32

SaveDC

winspool.drv

OpenPrinterW

oleaut32

VariantClear

Sections

.text
Size: 76KB - Virtual size: 139KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 12KB - Virtual size: 29KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 4KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 47KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 8KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

CHDODWOD
Size: 25KB - Virtual size: 28KB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE