NEAS[.]d1f9a964fe0df505c980beace6ec5da0[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.d1f9a964fe0df505c980beace6ec5da0.exe
Size

316KB
MD5

d1f9a964fe0df505c980beace6ec5da0
SHA1

5764e7cca0d0ac2067bfbc15029a2a354ef61dac
SHA256

619a3840a1c060a09e8be5d7ad7946e75ae6b8937df0612ece853ca741947f6b
SHA512

f1e42abc416cb7300f6b3fc7403510d3c4d81e6fd653892f0aaafa14f5dac6c2524fe6253655a58e295285824586e0702783d1d9e79af871a0c85cc92b255c0a
SSDEEP

6144:TOAztL6W+JJMPkZ5tJb52Wd83erDPKmjxTz7HbYcPCVYhg+KQ:TOMFwMPkDH/QiPLxvzblu2FKQ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.d1f9a964fe0df505c980beace6ec5da0.exe

Files

NEAS.d1f9a964fe0df505c980beace6ec5da0.exe
.exe windows:5 windows x86

f11f6549e50349d6f9e15c2e49acd8e8

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleHandleA
GetProcAddress
VirtualAlloc
VirtualFree
VirtualProtect

user32

EndPaint

advapi32

RegCloseKey

shell32

ShellExecuteA

ws2_32

htonl

iphlpapi

GetAdaptersInfo

Sections

OIYTGFRT
Size: - Virtual size: 384KB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

OIYTGFRT
Size: 301KB - Virtual size: 304KB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE