NEAS[.]7a214f41784041a7efdc16fc08222be0[.]exe | Triage

Sharing

General

Target

NEAS.7a214f41784041a7efdc16fc08222be0.exe
Size

315KB
MD5

7a214f41784041a7efdc16fc08222be0
SHA1

fc652e71abbbc553505ade9f98103bfcedc6f057
SHA256

6ba2c3b7f5a0b96cf016e92eac18de078ab9a313a89a6a68ca60d07e0faf2e99
SHA512

777e81c915ee0472249dea8d9e278648c179f000b0c482c46f11c434828210b666077d8c92ea8c21c31e47ca09b3a0e4561f213c1c8820c6410dc33f73cdb13d
SSDEEP

6144:HIJsyBGAEiQPBVRzPivYJoBuYXb94oIMdd8vfZ50Mhibw4OiT:BVAWNDTJHq9DIMTW8c1iT

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.7a214f41784041a7efdc16fc08222be0.exe

Files

NEAS.7a214f41784041a7efdc16fc08222be0.exe
.exe windows:5 windows x86

3b3ca5844bdb8b6b333c1e673e18f1c8

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleHandleA
GetProcAddress
VirtualAlloc
VirtualFree
VirtualProtect

user32

GetDC

advapi32

RegCloseKey

shell32

ShellExecuteW

ws2_32

gethostbyaddr

iphlpapi

GetAdaptersInfo

oleacc

LresultFromObject

gdi32

SaveDC

winspool.drv

OpenPrinterW

oleaut32

VariantClear

Sections

IOKGDTTY
Size: - Virtual size: 488KB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

IOKGDTTY
Size: 309KB - Virtual size: 312KB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE