NEAS[.]4eb6b8a3eac0b6bb01f848a7714501a0[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.4eb6b8a3eac0b6bb01f848a7714501a0.exe
Size

24KB
MD5

4eb6b8a3eac0b6bb01f848a7714501a0
SHA1

2c05d2b95b47b3c6ab9ca21cf0f3f171485978b7
SHA256

04203211e648c6d2ed85b8340bb676b62bc4535c86cffc2ca0f9df59380cd53a
SHA512

442a9775e17721d3c32785eda0b726b87938e11192268749c5c0bb2bd9bab6c0277346aec91fdec846d0eb5fb6d12be49a85e81359a11222e848dac204eae26d
SSDEEP

384:iXET14X4f0y4nQSMSq8FO8Mx+kGJGOfU+OW3yjOK:HT1g40wSXvdMx+v3f1OWmOK

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.4eb6b8a3eac0b6bb01f848a7714501a0.exe

Files

NEAS.4eb6b8a3eac0b6bb01f848a7714501a0.exe
.exe windows:5 windows x86

dadb12329976145c6a364992dc8ec07f

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_ISOLATION
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

wininet

HttpOpenRequestA
InternetQueryOptionW
InternetSetOptionW
HttpSendRequestW
InternetConnectA
InternetOpenW
HttpQueryInfoW
InternetReadFile

kernel32

CloseHandle
GetFileSize
GetModuleHandleW
ExitProcess
HeapCreate
HeapAlloc
GetModuleFileNameW
GetTempPathW
HeapDestroy
GetCurrentDirectoryW
Sleep
FreeLibrary
GetProcAddress
LoadLibraryW
HeapFree
DeleteFileW
lstrlenW
WriteFile
lstrcmpW
ReadFile
CreateFileW

user32

wsprintfW

shell32

ShellExecuteW

Sections

.text
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 4B

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.links
Size: 512B - Virtual size: 260B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 448B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 226B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ