NEAS[.]e6f8662ec51d3cbb4e4a117d8610ca10[.]exe | Triage

Sharing

General

Target

NEAS.e6f8662ec51d3cbb4e4a117d8610ca10.exe
Size

145KB
MD5

e6f8662ec51d3cbb4e4a117d8610ca10
SHA1

b0dd1620124782c6a36baa4057a3185f9e537571
SHA256

3dec6c0d6e771b05006f99bd9ba599b820b87c4f186d45c8a4db077d324e8859
SHA512

ef59631e95a129220481da4c7a3a43422f83924dbc0dbcdfaeadcfdcca6c7f580ba3530b47d7aa9d25bc234847a2df1ca62f16be51ade3b7e932a074b214095e
SSDEEP

3072:+apQLsjnOYOKOpGQ2ly+4yHyisr7O8CMFPv3yJDUKb80vh:+aIsfQ28+4R7T5vrsXh

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.e6f8662ec51d3cbb4e4a117d8610ca10.exe

Files

NEAS.e6f8662ec51d3cbb4e4a117d8610ca10.exe
.exe windows:1 windows x86

4652f05a6513d6d38cb0d015939cf207

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetLastError
GetProcAddress
CloseHandle
GetTempPathA
GetVersionExA
LoadLibraryA
RtlUnwind
CreateFileA
VirtualProtect
GetModuleHandleW
GetStartupInfoW
lstrlenW
LoadLibraryW
VirtualQuery
WriteFile
UnhandledExceptionFilter
GetCommandLineW
GetVersionExW
ExitProcess
GetStdHandle
GetModuleFileNameW
FreeEnvironmentStringsW

crtdll

__GetMainArgs
exit
raise
signal

user32

EnableMenuItem
LoadIconW
LoadStringW
SendMessageW
MessageBoxW
GetClientRect
InvalidateRect
DefWindowProcW
LoadCursorW
PostMessageW
DispatchMessageW
CreateWindowExW

advapi32

RegOpenKeyExW
RegSetValueExW
RegQueryValueExW
RegCloseKey
NotifyBootConfigStatus

Sections

.text
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 130KB - Virtual size: 364KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 378B - Virtual size: 378B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc1
Size: 214B - Virtual size: 214B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE