NEAS[.]8b6de8678cdcda25d5a11f3d85454360[.]exe | Triage

Sharing

General

Target

NEAS.8b6de8678cdcda25d5a11f3d85454360.exe
Size

154KB
MD5

8b6de8678cdcda25d5a11f3d85454360
SHA1

535af5f2fbbbb5f7986122c28a20c055a1001cca
SHA256

3d61838b1e02aa0fbc5a17c224207656bfa4be63bad775dc495c51a13a9c7ef4
SHA512

e5afd88dce460bc4131c1a53373cbbf618f4bbd92ef1183def175f10d3f4aba2a8528aeb6f45fdfb4142e16f9cf196cc94371bae3bf5ec5261ade08bb03f26ca
SSDEEP

3072:KYyVk5uvXRNIO1uAQDUBBsEbfabDqKZgZqwxR1GzEkjsScYIbBvjT8Yt:Kbk5uvXrbQaB9CbxkbQjsz5vjAW

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.8b6de8678cdcda25d5a11f3d85454360.exe

Files

NEAS.8b6de8678cdcda25d5a11f3d85454360.exe
.exe windows:1 windows x86

c48654a2b41284510bd88742bafd866d

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
LoadLibraryA
RtlUnwind
GetTickCount
GetModuleHandleA
GetLastError
FormatMessageA
LocalFree
LocalAlloc
TerminateProcess
QueryPerformanceCounter
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
DuplicateHandle
CloseHandle
CreateFileA
CreateEventA
WaitForSingleObject
GetStartupInfoA
lstrlenA

crtdll

__GetMainArgs
exit
raise
signal

ws2_32

WSASocketW
WSAEventSelect

advapi32

RegOpenKeyExA
RegQueryValueExA
RegSetValueExA
RegCloseKey

ole32

CLSIDFromString

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 131KB - Virtual size: 131KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ