NEAS[.]ac83bcf8ad0b2dae552246a819b4c1d0[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.ac83bcf8ad0b2dae552246a819b4c1d0.exe
Size

147KB
MD5

ac83bcf8ad0b2dae552246a819b4c1d0
SHA1

01bd4163557e9fdab9191f4777d40e9f96543582
SHA256

7c5ecf996f56281d9ebbc0a13227c6ad07dfd91cbaf5564d19e9b05f09d2406b
SHA512

6a21ada52b5272cd7c4cdb5d31b27fc479998e61ee1c636d3da5c54761ba3e44aae01ebb96ee3a877a2799b3f633118237eb54f801411c3c57d6bf18fc7197aa
SSDEEP

3072:yA4GU4QVmTIVPE7YaXYCfNicisIIMQgqoMNw21cuFQaArhGOU1nmi5GuMu:yF4OVPasyFQaAUn+uMu

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.ac83bcf8ad0b2dae552246a819b4c1d0.exe

Files

NEAS.ac83bcf8ad0b2dae552246a819b4c1d0.exe
.exe windows:1 windows x86

4d82a1a8ac7dae247b7e65f9bf1173b2

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

crypt32

CryptBinaryToStringA

kernel32

GetLastError
GetProcAddress
LoadLibraryA
RtlUnwind
VirtualProtect
GetModuleHandleA
FormatMessageA
LocalFree
GetTickCount
LocalAlloc
InterlockedCompareExchange

user32

GetCursorPos
CharToOemBuffA

crtdll

__GetMainArgs
exit
raise
signal

mswsock

s_perror

ws2_32

WSASocketW
WSAEventSelect

advapi32

RegOpenKeyExA

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 40B

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 126KB - Virtual size: 126KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc2
Size: 427B - Virtual size: 427B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE