NEAS[.]e60059efedb6d9c64736d369936d1bb0[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.e60059efedb6d9c64736d369936d1bb0.exe
Size

74KB
MD5

e60059efedb6d9c64736d369936d1bb0
SHA1

ce5107fb6fc52829b807936d6cfa62e7bef4a3af
SHA256

752db7f5230c9adf5cbe44ad15cade240dbeda9f917486da6927b2905b467ca1
SHA512

347c8fdbeb0a60aa9a9d90bc95a8d6614d5d03e4f3374b6191e30af3aa42ad06bbfb1361483d5592e279a74adef0da849c947116fd3753af25d41519769cfaa5
SSDEEP

1536:JgajdM0t2hl9ET9xBOz3BODtysTHFQJmGh/t1KG:X32h7yxBGmtHQUGhF1Z

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.e60059efedb6d9c64736d369936d1bb0.exe

Files

NEAS.e60059efedb6d9c64736d369936d1bb0.exe
.exe windows:5 windows x86

74d7c7f23cc1c85d7e4d37ad80b4bf84

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

user32

LoadIconW

advapi32

RegQueryValueExW

shell32

ShellExecuteW

ws2_32

WSAStartup

iphlpapi

GetAdaptersAddresses

Sections

.text
Size: 66KB - Virtual size: 172KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 24B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE