NEAS[.]187d554fd141a82bda0857b538ad61c0[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.187d554fd141a82bda0857b538ad61c0.exe
Size

182KB
MD5

187d554fd141a82bda0857b538ad61c0
SHA1

8f01a5882d3f5c78b9a9717b65bf3d40e37ae069
SHA256

9f11d3a8b1a5fadfc2f5560b8acedc6e887b46fe3ed94f4738a761599c5620d2
SHA512

907af117aa2945dbe6fe9fd5cd448eded4e652215951f99b2187ae749940d778655544ff5f5d97972ef66ff7194b1d822a1b4903898c22f7493e3ad30e6bce2a
SSDEEP

3072:xTsDjlJ20yYqsJG2S+Ox6a8sTcN7ANAN2BAt6BiPkXmb29fL5UGiZWLKYvQd2gp:xADjllyYqs42SAAcNNYA1qmbQfLmWxgp

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.187d554fd141a82bda0857b538ad61c0.exe

Files

NEAS.187d554fd141a82bda0857b538ad61c0.exe
.exe windows:1 windows x86

dd943f2bcea3642dcab4b8939268716a

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
LoadLibraryA
RtlUnwind
GetModuleHandleW
lstrcpyW
lstrcmpW
lstrcatW
CloseHandle
WriteFile
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetLastError
GetCommandLineW
lstrlenW
CreateFileW
LoadLibraryW

crtdll

__GetMainArgs
exit
raise
signal

ole32

ReleaseStgMedium

advapi32

RegOpenKeyExW
RegQueryValueExW
RegCloseKey

user32

LoadStringW
SendMessageW
wsprintfW
MessageBoxW

Sections

.text
Size: 14KB - Virtual size: 14KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 130KB - Virtual size: 130KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ