NEAS[.]f551b1c8a57222032b5917282cafa620[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.f551b1c8a57222032b5917282cafa620.exe
Size

81KB
MD5

f551b1c8a57222032b5917282cafa620
SHA1

ba756eabcb68e10e0053dda8b4f8f493ed35d164
SHA256

7fbf76b1b44831ad7e2b3b60977a49e9ebb999ad96a0df4095a69863f600763b
SHA512

76de3e1fd1fbe58ab7a22929476c3f09059b22bf5c6657d0880ee912971ec49ac0f0e07b945966f10fa8ff4c8f2c0728a85dd230f420d2a0cf6654a79fddad2b
SSDEEP

768:fTBuNqzWbjf/Z0IypWdt0+jdbkoIjaNOm8ld9b85Kb09:MNqzWyBGjdQW4/9b8H9

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.f551b1c8a57222032b5917282cafa620.exe

Files

NEAS.f551b1c8a57222032b5917282cafa620.exe
.exe windows:5 windows x86

d0b8285184365a838ba34f4f2ef57766

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

wininet

InternetSetOptionW
HttpSendRequestW
InternetConnectW
InternetReadFile
HttpQueryInfoW
HttpOpenRequestW
InternetQueryOptionW
InternetOpenW

kernel32

HeapCreate
GetModuleFileNameW
DeleteFileW
CloseHandle
GetCurrentDirectoryW
GetTempPathW
lstrlenW
lstrcmpW
ExitProcess
GetFileSize
HeapAlloc
GetModuleHandleW
WriteFile
ReadFile
CreateFileW

user32

wsprintfW

shell32

ShellExecuteW

Sections

.text
Size: 1024B - Virtual size: 891B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 158B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ