NEAS[.]2868a8d776c62930db35d25f73eae6e0[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.2868a8d776c62930db35d25f73eae6e0.exe
Size

76KB
MD5

2868a8d776c62930db35d25f73eae6e0
SHA1

f079f18cd704f9da1c51af0dd0c9650dd8436b8e
SHA256

6a22b6a09b989335b0165c99c214f1256f035275576c719e48c26ce5d4bf6941
SHA512

9c33700ef54a5ef6b883d29bd043e1fe1f70d8e7af48ee1df73cb41195b21e1364e0ccd163a7ceee718bb49314fb9d5a5dd6aaa48a82ad82f560abb7893e9f86
SSDEEP

1536:jIr3YriYiUi+H++o1eVlXd+8c0GXmvJJNHjLwl50fPGR3:jyYti0pXd+8c0GWvJ3Hvwl5f

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.2868a8d776c62930db35d25f73eae6e0.exe

Files

NEAS.2868a8d776c62930db35d25f73eae6e0.exe
.exe windows:5 windows x86

b892955ae494fe908bdf52e81e1dfa4c

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleHandleA
GetProcAddress
VirtualAlloc
VirtualFree
VirtualProtect

user32

EndPaint

advapi32

RegCloseKey

shell32

ShellExecuteA

ws2_32

WSAStartup

iphlpapi

GetAdaptersAddresses

Sections

BSBDHSHD
Size: - Virtual size: 164KB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSBDHSHD
Size: 75KB - Virtual size: 76KB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE