NEAS[.]4716278b22b196572934938cab5276c0[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.4716278b22b196572934938cab5276c0.exe
Size

143KB
MD5

4716278b22b196572934938cab5276c0
SHA1

6141ee1e1cd7849b689b3ea7a40a23b9613b91d6
SHA256

941a81f0a462ebfe4560349309136ba8b5a88b4b9579b8224ad0ea7ba3cc0912
SHA512

17c2caf9b10218e3618e7695dfdb3f0bbcd9fe8ed89c72458f44979687df48a0c77e1e03a8f4455817c2daa6df1b835a5269d8fa8081ba1ae907bb79d89ee8a9
SSDEEP

3072:gCMiqJl3v1S4AsvdhxBz8bNk/AKItB/pL/s9hlSLUFWzw6:gCMzfM4vxBIO+XpDnUUz1

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.4716278b22b196572934938cab5276c0.exe

Files

NEAS.4716278b22b196572934938cab5276c0.exe
.exe windows:1 windows x86

1cf4055c57f45e801195563dd097b03b

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

iphlpapi

GetAdaptersInfo

kernel32

GetModuleHandleA
GetProcAddress
CloseHandle
RtlUnwind
GetStartupInfoA
lstrlenA
LoadLibraryA

crtdll

__GetMainArgs
exit
raise
signal

user32

GetDlgItemInt
SetTimer
KillTimer
LoadIconA
ShowWindow
LoadStringA
SendMessageA
GetDlgItem
wsprintfA
MessageBoxA
ReleaseDC
GetDC
GetSystemMetrics
InvalidateRect
EndPaint
BeginPaint
LoadCursorA
PostMessageA
PostQuitMessage
DialogBoxParamA
EndDialog
DispatchMessageA

advapi32

RegOpenKeyExA
RegQueryValueExA
RegCloseKey

Sections

.text
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 126KB - Virtual size: 126KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 334B - Virtual size: 334B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ