NEAS[.]b010b58e905ffa9a16cc0f8290496630[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.b010b58e905ffa9a16cc0f8290496630.exe
Size

134KB
MD5

b010b58e905ffa9a16cc0f8290496630
SHA1

f181e3fe9e57f0df7cf62d2410733ded58ddd9ed
SHA256

cebcf3f1a7c916f7e16a34fe77a6b958d134b5a939cc8b008e29b9dc2431628a
SHA512

b569e68c882561f1577f3601502ae541ad8e195b6b41fd1f797e5d7833132ba1d4bdac6535a5dcf0a6fb7331e3d33bbab80be618a0e7448b87d4fee1c9d72987
SSDEEP

1536:jXyp3giynnjxu8fDDD/Frw7OSNH8JsjUoSYxm78PKa70rmaCvYTjipvF23:jX63ojxTDD4jtBUTYxvT0F6YvQd23

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.b010b58e905ffa9a16cc0f8290496630.exe

Files

NEAS.b010b58e905ffa9a16cc0f8290496630.exe
.exe windows:1 windows x86

7628ec2a3ef703d31e8f979a0d6828b3

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetModuleHandleA
GetProcAddress

iphlpapi

GetAdaptersInfo

crtdll

exit

user32

GetDC

advapi32

RegCloseKey

Sections

.MPRESS1
Size: 99KB - Virtual size: 148KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.MPRESS2
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 184B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE