NEAS[.]f7df237e0514ccc4acc9c6b4fa040960[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.f7df237e0514ccc4acc9c6b4fa040960.exe
Size

6KB
MD5

f7df237e0514ccc4acc9c6b4fa040960
SHA1

efab19c9baee9fffdbec669e40fca7df9301f54a
SHA256

9a6938688315f3908f486742d14f7f756922e1689bdd0a2d963ffdcad574d74c
SHA512

3f1eb986020e93a49a9990051f77b72d1a3c85b1ba2b66ceae742ea4a488b6eb3db380a6253e1c85341bde580b289b83d4069bd9329eb8482615ed7b238a2d33
SSDEEP

192:Jai5AbBNGnKfzr/JBylNuOH/OrWQwvzgZeUq:n5q3KKfzrxBylNx2rWHzg/q

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.f7df237e0514ccc4acc9c6b4fa040960.exe

Files

NEAS.f7df237e0514ccc4acc9c6b4fa040960.exe
.exe windows:4 windows x86

cc40fefa3af5cd00cc28dbd874038a4d

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CloseHandle
CreateFileW
DeleteFileW
ExitProcess
GetComputerNameW
GetCurrentDirectoryW
GetFileSize
GetModuleFileNameW
GetTempPathW
GetVersionExW
ReadFile
WriteFile
lstrlenW
lstrcmpW
SleepEx
VirtualAlloc

wininet

HttpOpenRequestW
HttpSendRequestW
InternetOpenW
InternetConnectW
InternetCloseHandle
InternetReadFile

shell32

ShellExecuteW

ntdll

RtlDecompressBuffer
swprintf

Sections

.text
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 1003B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ