NEAS[.]6a9687258ec56dac2f4b6f82178ab3a0[.]exe | Triage

Sharing

General

Target

NEAS.6a9687258ec56dac2f4b6f82178ab3a0.exe
Size

101KB
MD5

6a9687258ec56dac2f4b6f82178ab3a0
SHA1

ae7d13fbddb3f9aa3e04913a1c3f257569138a31
SHA256

8086cab8750d8ef7ef45f5dca299203b4a510790a5da563d365f3269f79bc38c
SHA512

a54b3830cf8c868642e41e37838f7d58ced4d0f18b85b7fdd8f1ea5f6c95c2b72a158bab40d4e6da7d1940d87140a6ccad93deaf9f5f9086df3fa2badbcd354f
SSDEEP

3072:IBlK+RT7P5ajuhSLVtrg6HqjnrvwDPwWUOIbIk1RQvvxNlLr9f:IBlK+RM6hSVHynrvwDlIUkncxzrJ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.6a9687258ec56dac2f4b6f82178ab3a0.exe

Files

NEAS.6a9687258ec56dac2f4b6f82178ab3a0.exe
.exe windows:5 windows x86

8e328c3776eaf8149a99ce2341e731fb

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

user32

DestroyMenu

advapi32

RegSetValueExW

shell32

ShellExecuteW

ws2_32

gethostbyname

iphlpapi

GetAdaptersAddresses

oleacc

LresultFromObject

gdi32

DeleteDC

winspool.drv

OpenPrinterW

oleaut32

VariantClear

Sections

.text
Size: 94KB - Virtual size: 284KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 24B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE