NEAS[.]22ae56cd060428ce9e5a687a481a2f60[.]exe | Triage

Sharing

General

Target

NEAS.22ae56cd060428ce9e5a687a481a2f60.exe
Size

68KB
MD5

22ae56cd060428ce9e5a687a481a2f60
SHA1

dbf8ece70f3deeb3e0c8a765167ed12e98c95036
SHA256

f981b04fb6f00f7da8dc04e27e55a07ef6b23804b57c55cd9f24bf5b09fd303e
SHA512

4089373a875fb3b6785e612b0dfeb328634f8dd4a49c3d4ac0c31c629748c1bbaada15367d663b8933a9fd189ca4b29ca5ded3e01944e780331baedbff92ffb7
SSDEEP

768:UjH1d/Uzchmm4pHoVXncgLhZVihEO8klpITZC7u8tsa4HeLF8/64gi+f4pOZDQzA:u1d/UYhmoVXncCki+w4Zklv37gvnEsZ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.22ae56cd060428ce9e5a687a481a2f60.exe

Files

NEAS.22ae56cd060428ce9e5a687a481a2f60.exe
.exe windows:4 windows x86

ae0a5112fe1176f4e5f6e1bc95e4c209

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

MessageBoxA

kernel32

FreeLibrary
lstrcatA
GetModuleFileNameA
ExitProcess
LoadLibraryA
GetProcAddress
lstrlenA

advapi32

RegQueryValueExA
RegCloseKey
RegOpenKeyExA

Sections

.text
Size: 1024B - Virtual size: 556B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 404B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 61KB - Virtual size: 61KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ