NEAS[.]ae0a68bc3bf840f8d3df8e5658c820bc[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.ae0a68bc3bf840f8d3df8e5658c820bc.exe
Size

73KB
MD5

ae0a68bc3bf840f8d3df8e5658c820bc
SHA1

20239046140da2895dedabf1e2d2142d51b0e2c3
SHA256

d4b28a7ba87d909d34454991521e6362d5926632f9c4173ff79d32926150f21b
SHA512

38cc199fdddc8823798f5cd3f5bf1ed5cb0050dfc7e77da4d406c39e478ffe54952d787e32089437372ebeda1678c599bb1459777a2ead33e888425f2156cd4c
SSDEEP

1536:JgajdM0t2hl9ET9xBOz3BODtysTHFQJmGh/tlMi:X32h7yxBGmtHQUGhFlMi

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.ae0a68bc3bf840f8d3df8e5658c820bc.exe

Files

NEAS.ae0a68bc3bf840f8d3df8e5658c820bc.exe
.exe windows:5 windows x86

74d7c7f23cc1c85d7e4d37ad80b4bf84

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

user32

LoadIconW

advapi32

RegQueryValueExW

shell32

ShellExecuteW

ws2_32

WSAStartup

iphlpapi

GetAdaptersAddresses

Sections

.text
Size: 66KB - Virtual size: 172KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 24B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE