NEAS[.]4ca6d33280fa1c7f4ee10d4e463d1560[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.4ca6d33280fa1c7f4ee10d4e463d1560.exe
Size

144KB
MD5

4ca6d33280fa1c7f4ee10d4e463d1560
SHA1

2da1cadfbc596f70fd0fc76a7514d14d4f4f8e67
SHA256

19c151a3555797e17f622984d46306dad0a0ac12225a241b8e346e0d227eea7e
SHA512

30317ba8e0b61c537da28fe6b02b01a778f57e8644484aacbf38048a7ea38a0f3d5d40ef668d940ec9a207edf3be5de70f2feece0da87f43eaab75ef79e0d79e
SSDEEP

3072:MHLG6Xkuwh2ntk2LzSV0aKs6FNdeufWT+Z82YYixDbNSxYi4XIpXuoNn:MrGGS2ntkY1FNZuyq2eDbf4pXuod

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.4ca6d33280fa1c7f4ee10d4e463d1560.exe

Files

NEAS.4ca6d33280fa1c7f4ee10d4e463d1560.exe
.exe windows:1 windows x86

3d289df6b9c7102d3e84d76e331f7894

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

iphlpapi

GetAdaptersInfo

kernel32

GetModuleHandleA
GetProcAddress
CloseHandle
RtlUnwind
GetLastError
MultiByteToWideChar
WideCharToMultiByte
FreeLibrary
GetStartupInfoA
lstrlenA
LoadLibraryA

crtdll

__GetMainArgs
exit
raise
signal

ntdll

NtWaitForSingleObject

wininet

InternetQueryOptionA

gdi32

SetPixel
BitBlt
CreateCompatibleBitmap
SelectObject
DeleteObject
CreateCompatibleDC
DeleteDC
GetDeviceCaps

advapi32

RegOpenKeyExA
RegQueryValueExA
RegCloseKey

user32

LoadIconA
LoadStringA
SendMessageA
MessageBoxA
GetClientRect
InvalidateRect
EndPaint
BeginPaint
LoadCursorA
PostMessageA
DispatchMessageA

Sections

.text
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 129KB - Virtual size: 129KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 338B - Virtual size: 338B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ