NEAS[.]1adf0df160cc8db9ad8b37d790798fa0[.]exe | Triage

Sharing

General

Target

NEAS.1adf0df160cc8db9ad8b37d790798fa0.exe
Size

45KB
MD5

1adf0df160cc8db9ad8b37d790798fa0
SHA1

c07b92b9347312f883099e4d7956c3f56f4a0df1
SHA256

ec4a58c161414316ed4047320dd00c0200fdb94b66c1203c24bb38f9dbbaef06
SHA512

f6d0d48407b27559371c5a4264216ab8da7ff7cf939960fecf18e5523ff5b627452b56caed781ac208c583237f6d959e283525848a371f4e5d275f065148820c
SSDEEP

768:Pyb1/K052J0TIi9/OYEV6HcZ3Gr4USwVTdSRXW6ZPPfyvPuSserGfZpnNfR:Pyj2JA9Wicdo4rwVTdSRmcPfmPzIZtNJ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.1adf0df160cc8db9ad8b37d790798fa0.exe

Files

NEAS.1adf0df160cc8db9ad8b37d790798fa0.exe
.exe windows:4 windows x86

f381201f60664023e6bf7212f371e02e

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcr70

__p__fmode
__set_app_type
__p__commode
_onexit
_controlfp
_except_handler3
_adjust_fdiv
__setusermatherr
_initterm
__getmainargs
_acmdln
exit
_cexit
_XcptFilter
_exit
_c_exit
_mbschr
_mbsicmp
_mbsrchr
strlen
_mbsncpy
_access
__dllonexit
isspace

kernel32

GetModuleHandleA
GetModuleFileNameA
LoadLibraryA
GetProcAddress
_lopen
_lclose
_llseek
_lread
GetSystemDirectoryA
GetCurrentDirectoryA
lstrcpyA
lstrcatA
GetStartupInfoA

user32

MessageBoxA
LoadStringA
wsprintfA

advapi32

RegQueryValueA
RegOpenKeyA
RegCloseKey

Sections

.text
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ