NEAS[.]f3e838206a9c9ef0113fb6310d9ed940[.]exe | Triage

Sharing

General

Target

NEAS.f3e838206a9c9ef0113fb6310d9ed940.exe
Size

144KB
MD5

f3e838206a9c9ef0113fb6310d9ed940
SHA1

613d6e46e49c86e5f83101c15c6cb921cdc987cd
SHA256

c8d6ccf84c7f5ebbb4efca87d9ea2262b1bb266666aac3d1bd0e5eea190d028b
SHA512

3c516de6550067598849d376cc4c92ebcff43ac4a956d2be4ec3020efaf9f891e8db6481ddff1ba766f7d6fd1f536fc41212747169e20c1f4758f9df139646ee
SSDEEP

3072:UFiXoQTi/vkN/7FIIg+OnbNpEvNzPfWIiJP4EsrrLSOZtCF:Uc4QTiEN/7LtAb7KNzPEPTsXLiF

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.f3e838206a9c9ef0113fb6310d9ed940.exe

Files

NEAS.f3e838206a9c9ef0113fb6310d9ed940.exe
.exe windows:1 windows x86

01fe59aa5709aef888d837c5be5cf77d

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

crypt32

CryptBinaryToStringA

kernel32

GetProcAddress
LoadLibraryA
RtlUnwind
VirtualProtect
GetModuleHandleW
CloseHandle
WriteFile
GetCurrentProcess
GetLastError
GetCommandLineW
CreateFileW
GetVersionExW

user32

GetWindow
LoadStringW

crtdll

__GetMainArgs
exit
raise
signal

setupapi

SetupDiEnumDeviceInterfaces

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 40B

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 124KB - Virtual size: 124KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 936B - Virtual size: 936B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc2
Size: 204B - Virtual size: 204B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE