NEAS[.]f344a0161a5d1a08a4e11cd1c5382660[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.f344a0161a5d1a08a4e11cd1c5382660.exe
Size

332KB
MD5

f344a0161a5d1a08a4e11cd1c5382660
SHA1

2735eaa306671afd85ccbaa2125102f8558d9830
SHA256

21317824ead8a21e8c472f95736be8ff8f9401415917e3e69a1cecb625f18661
SHA512

56a8bea7bcbe8d1e1c189b15ee17ba08f7f8d29129612f4f0ca529f1c42c6605527a0a0802405b5f870068ad65c84887b28f78936d0ab0202959fbb3f71c2929
SSDEEP

6144:rtlyU+eCLtUT2HdPe/5xag5BaNvSGh1L7oJSbGqJwb:/P0e2cBxa6aNaGT7oJS+

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.f344a0161a5d1a08a4e11cd1c5382660.exe

Files

NEAS.f344a0161a5d1a08a4e11cd1c5382660.exe
.exe windows:4 windows x86

ca64cdfb02f45be5be6cabe2073f0b87

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

VirtualAlloc
LoadLibraryA
LeaveCriticalSection
EnterCriticalSection
ExpandEnvironmentStringsA
GetCurrentThreadId
SetUnhandledExceptionFilter
GetTickCount
QueryPerformanceCounter
SetLastError
LocalFree
FormatMessageA
SetConsoleCtrlHandler
GetLastError
UnhandledExceptionFilter
GetModuleHandleA
GetCurrentProcessId
GetSystemTimeAsFileTime
TerminateProcess
GetCurrentProcess

user32

LoadIconA
LoadCursorW
LoadCursorA

msvcrt

_controlfp
_except_handler3
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__getmainargs
__initenv
_cexit
_XcptFilter
_exit
_c_exit
_write
perror
_errno
system
gmtime

advapi32

RegOpenKeyA
RegQueryValueExW
RegCloseKey

Sections

.data
Size: 278KB - Virtual size: 360KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 52KB - Virtual size: 56KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE