NEAS[.]d5717b770e405906eb0e391768423360[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.d5717b770e405906eb0e391768423360.exe
Size

303KB
MD5

d5717b770e405906eb0e391768423360
SHA1

61367cb4a3aee6963f7c611e926cd367f38e5153
SHA256

cf78ddc7aac649647281e97898e2507ce8b22f353c2b204178fc770b26f15d92
SHA512

4b4b93e9908a999412585b4c410eb3f7b7cdc0f450ce534e9dfc62f6d288e76182bd6d8a9f00f9857f24f1972ac221e011fc7b4b432b1fed6d24cecb2be76d68
SSDEEP

6144:GUu34jq+y7Gww+gASGST4khxN6OlpwN9wVFMsaYSnXb:Ioy7G02T4mcN2UsaY0r

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.d5717b770e405906eb0e391768423360.exe

Files

NEAS.d5717b770e405906eb0e391768423360.exe
.exe windows:4 windows x86

4d4238254354e35d40cf0ec441d960c4

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

powrprof

SetActivePwrScheme

pdh

PdhGetFormattedCounterValue

psapi

GetModuleFileNameExA

version

GetFileVersionInfoSizeA

user32

PostQuitMessage

gdi32

GetViewportExtEx

comdlg32

GetFileTitleA

winspool.drv

OpenPrinterA

advapi32

RegCloseKey

shell32

Shell_NotifyIconA

comctl32

ImageList_GetIconSize

oledlg

ord8

ole32

CoFreeUnusedLibraries

olepro32

ord253

oleaut32

VarDateFromStr

Sections

.text
Size: 242KB - Virtual size: 740KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 59KB - Virtual size: 59KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE