NEAS[.]5862066cfb9d947170971c4f85189030[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.5862066cfb9d947170971c4f85189030.exe
Size

145KB
MD5

5862066cfb9d947170971c4f85189030
SHA1

93812d6276b504bf897c20840af9b0aa39a4440e
SHA256

66306897669b4b77d1a306f3f8d455dc3dd20029e082a0045b45719ecfa50aef
SHA512

7b45ee7e3b1f58e3458e36f00425af17b0abd1d156213a55701bc408be3fbcf55bb14bbdd96517c6ea958b7d5666014f978b457b43bf3e9eef904b33da42adda
SSDEEP

3072:+apQLsjnOYOKOpGQ2ly+4yHyisr7O8CMFPv3yJDUKb80vn:+aIsfQ28+4R7T5vrsXn

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.5862066cfb9d947170971c4f85189030.exe

Files

NEAS.5862066cfb9d947170971c4f85189030.exe
.exe windows:1 windows x86

4652f05a6513d6d38cb0d015939cf207

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetLastError
GetProcAddress
CloseHandle
GetTempPathA
GetVersionExA
LoadLibraryA
RtlUnwind
CreateFileA
VirtualProtect
GetModuleHandleW
GetStartupInfoW
lstrlenW
LoadLibraryW
VirtualQuery
WriteFile
UnhandledExceptionFilter
GetCommandLineW
GetVersionExW
ExitProcess
GetStdHandle
GetModuleFileNameW
FreeEnvironmentStringsW

crtdll

__GetMainArgs
exit
raise
signal

user32

EnableMenuItem
LoadIconW
LoadStringW
SendMessageW
MessageBoxW
GetClientRect
InvalidateRect
DefWindowProcW
LoadCursorW
PostMessageW
DispatchMessageW
CreateWindowExW

advapi32

RegOpenKeyExW
RegSetValueExW
RegQueryValueExW
RegCloseKey
NotifyBootConfigStatus

Sections

.text
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 130KB - Virtual size: 364KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 378B - Virtual size: 378B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc1
Size: 214B - Virtual size: 214B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE