NEAS[.]cd7d5b82c1465f031c0bc7ef1c632d10[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.cd7d5b82c1465f031c0bc7ef1c632d10.exe
Size

75KB
MD5

cd7d5b82c1465f031c0bc7ef1c632d10
SHA1

a52ee034e7e088a26f475e0147bc1eaf5f773841
SHA256

b3daaaa016375d1198a51e2892139c88de730ee8c2f546c755b10e91f0f85ce2
SHA512

304c25f61114dfc23da7fe772a2b5e59fe696fb622165cdb80f106d78a2ac5dee003f017fe9e014bb0b16386386f8baa067dc2ae31e3def6d196f1a0030e6635
SSDEEP

1536:JgajdM0t2hl9ET9xBOz3BODtysTHFQJmGh/t1Mu:X32h7yxBGmtHQUGhF1r

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.cd7d5b82c1465f031c0bc7ef1c632d10.exe

Files

NEAS.cd7d5b82c1465f031c0bc7ef1c632d10.exe
.exe windows:5 windows x86

74d7c7f23cc1c85d7e4d37ad80b4bf84

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

user32

LoadIconW

advapi32

RegQueryValueExW

shell32

ShellExecuteW

ws2_32

WSAStartup

iphlpapi

GetAdaptersAddresses

Sections

.text
Size: 66KB - Virtual size: 172KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 24B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE