NEAS[.]2a294fec104b70b012852d40d2b661a0[.]exe | Triage

Sharing

General

Target

NEAS.2a294fec104b70b012852d40d2b661a0.exe
Size

145KB
MD5

2a294fec104b70b012852d40d2b661a0
SHA1

f97d39d0ae3dc6919af5e5e7beefc68339e3c98f
SHA256

df16258ff56273808474e607c99263db23ecd71423f5d4c7f7a07c7adb4dd366
SHA512

db02e4ea26f10a40a759c79697d471c7a87c0efd6c3bb0094b030348c3e9187df6f062cf17bed4c927eb7508b5ac4a865e917585d623af1eca6de5505d6f7dd0
SSDEEP

3072:lHkhPlw5gRWzXe3ZuZkpoTNwMjJ8TtSX5:lEhogRie3ZuZkpohJihSX5

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.2a294fec104b70b012852d40d2b661a0.exe

Files

NEAS.2a294fec104b70b012852d40d2b661a0.exe
.exe windows:1 windows x86

8eb8e4b59586cb66b4c63ac3fe628e44

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

crypt32

CryptBinaryToStringW

kernel32

GetProcAddress
LoadLibraryA
RtlUnwind
VirtualProtect
GetModuleHandleW
GetLastError
GetCommandLineW
GetStdHandle
MultiByteToWideChar
GetFileType

shlwapi

PathAppendA

crtdll

__GetMainArgs
exit
raise
signal

ntdll

wcscat

user32

LoadStringW

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 40B

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 127KB - Virtual size: 127KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 916B - Virtual size: 916B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 268B - Virtual size: 268B

IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ