NEAS[.]3d15c7282bf17776d973202dd19aa4a0[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.3d15c7282bf17776d973202dd19aa4a0.exe
Size

319KB
MD5

3d15c7282bf17776d973202dd19aa4a0
SHA1

37dd301f2c3ce79102085a2ab55067d5786b99af
SHA256

866af3b2baa138ee86238b295081b1358077bb3ed148959ff13d83038514843e
SHA512

ab8f52568e3c899b0e7d053005fe9bd2897cbed5677713926aee141cbb3a531b17d0b874f0987d45deaf5da81e2f28bf7af757613ecc38ff36543e8d036418b6
SSDEEP

6144:Zt58sOQf6lghcnBBLf9tQiepbGjhboOBnSusSTUvXBirw/AwFFk:ZtisOQf6lXbpt/kbGjhV5AvXxHU

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.3d15c7282bf17776d973202dd19aa4a0.exe

Files

NEAS.3d15c7282bf17776d973202dd19aa4a0.exe
.exe windows:5 windows x86

06ef33a1c45fdabdfa5b6e2e08bce5aa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

user32

LoadCursorW

advapi32

RegQueryValueExW

shell32

ShellExecuteA

ws2_32

htonl

iphlpapi

GetAdaptersInfo

Sections

.text
Size: 289KB - Virtual size: 404KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 27KB - Virtual size: 28KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 24B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE