NEAS[.]NEASda1ece5789d9bff66d25d81b4817b510exe[.]exe | Triage

Sharing

General

Target

NEAS.NEASda1ece5789d9bff66d25d81b4817b510exe.exe
Size

87KB
MD5

da1ece5789d9bff66d25d81b4817b510
SHA1

8886076503638cb8c215388139deb5a60283ae6e
SHA256

894c09420fe3469bca8dcb72bc4e760fc9da0843ef63062bf2f6e5d8905bca70
SHA512

216d0b3af6780905e7db31edda667dc8ca258d7c7432ce43cd9351f08aeba6f0b06412885c7bcf1babcc350d6fd6c60acea8c2dfe9c29e904d01edc353efb524
SSDEEP

1536:wKh0HouL73SpzUgJbBN/6ZvsxQ2fpfLTcBIaw5cf+6XXY+Y4TkXVcfw:wKZVUgJtN/6B2GIaScf+6tY4TGVcfw

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.NEASda1ece5789d9bff66d25d81b4817b510exe.exe

Files

NEAS.NEASda1ece5789d9bff66d25d81b4817b510exe.exe
.exe windows:4 windows x86

0e661519bbae53eb035094b391d0c3ec

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

ShowCursor
GetCursorPos
LoadCursorW
SetClipboardData

kernel32

GetProcAddress
WaitForSingleObject
VirtualProtect
CreateFileW
CreateThread
ExitProcess
GetModuleFileNameW
GetModuleHandleA
GetTickCount
LoadLibraryA
ReadFile
VirtualAlloc
VirtualFree

shlwapi

PathStripToRootW
PathIsUNCW

comctl32

ImageList_Create

gdiplus

GdiplusShutdown
GdipCreateFromHDC
GdipDrawImageI
GdipFree

advapi32

RegOpenKeyExW
RegEnumKeyW
RegQueryValueW

imagehlp

BindImageEx

winspool.drv

OpenPrinterW

Sections

.text
Size: 72KB - Virtual size: 72KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ