NEAS[.]f4021456e7ce05f5c29c37bd78a48760[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.f4021456e7ce05f5c29c37bd78a48760.exe
Size

19KB
MD5

f4021456e7ce05f5c29c37bd78a48760
SHA1

d08758692b979612d05665de7e0ad6331881853b
SHA256

ec4c587afad4ea0942b9431f2ac2585ab003d71c0e9c966e8059fca43aa732d1
SHA512

2d751a355eeb22d851705f095f3f7fa68c7262594dd2eab6ef21dc57660467d016b0be34a277db19b91ac6abed260079067ff50b82c65cbef6df8c080f19b0e2
SSDEEP

192:LVqQ/nB6t7GbXkf0Xlvol3+KFheYYGtTyiXrwOwWn17mXOyzysRyWq8A40NT27KL:LV3C4eGlwV+KByALWOgbA40N

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.f4021456e7ce05f5c29c37bd78a48760.exe

Files

NEAS.f4021456e7ce05f5c29c37bd78a48760.exe
.exe windows:4 windows x86

8b952403cd7980f20cd10a1500bc5902

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

ole32

StgOpenStorage
CoInitialize

kernel32

RaiseException
HeapSetInformation
GetCurrentProcess
UnhandledExceptionFilter
GetTickCount
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCurrentProcessId
QueryPerformanceCounter
GetModuleHandleA
SetUnhandledExceptionFilter
InterlockedCompareExchange
InterlockedExchange
Sleep
TerminateProcess

advapi32

CredFree

dhcpcsvc

DhcpDeRegisterParamChange

Sections

.text
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1024B - Virtual size: 744B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ