NEAS[.]7f4a754ce92bc9be81e67de93d4066a0[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.7f4a754ce92bc9be81e67de93d4066a0.exe
Size

392KB
MD5

7f4a754ce92bc9be81e67de93d4066a0
SHA1

10a59f61bc0334a6ad41093f76c29180b9acb5f0
SHA256

d21ef520785d883787090b8eb207665c8c956666d37eadc33eb52e709d6c3f1a
SHA512

6bc1da5b5982d7acec854fc9ba24bdb0f155e95623a2ce37629e041008ba8e0de827dd0e441568babfd2fbe5346aa131b332fef5687463feff3e83d930120de5
SSDEEP

6144:0fWMGgDtXLhc5/mo5Rbwm07dmFdI9ZzaJWd6ym:0fWMGgJbOmo5RbwmtFCqIG

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.7f4a754ce92bc9be81e67de93d4066a0.exe

Files

NEAS.7f4a754ce92bc9be81e67de93d4066a0.exe
.exe windows:4 windows x86

8ad75a1021dce253ba1002006de70ec1

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetModuleHandleA
GetProcAddress

msvcrt

memset

comctl32

InitCommonControls

user32

MessageBoxA

shell32

ShellExecuteExA

ole32

CoInitialize

advapi32

GetSidSubAuthority

Sections

.
Size: 7KB - Virtual size: 28KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.
Size: 1024B - Virtual size: 700B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.l1
Size: 1024B - Virtual size: 1024B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE