NEAS[.]b25268797ac4880f5434a7dd5e098640[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.b25268797ac4880f5434a7dd5e098640.exe
Size

132KB
MD5

b25268797ac4880f5434a7dd5e098640
SHA1

2d7022f2d4f5d22f07eacd760e67b8dc294a594a
SHA256

271256310d7da17be8bd2a4d0e970cc8fbb0d16f4c6511e62a956ae1965c50b3
SHA512

f386452fad256a987765c6fef057f28a782aa364acf14a8d9ee73cb18eb2f34a7f69370386ab7aff3774cfc144cd9cc507ddcad3d137849d1e11db74105b1d0a
SSDEEP

3072:xvFUa0b8w7wTKGR5qoFKnaymV/atYdkGT0CUuS4hsD4ruwC:xvFUfITHkLMLss5C

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.b25268797ac4880f5434a7dd5e098640.exe

Files

NEAS.b25268797ac4880f5434a7dd5e098640.exe
.exe windows:5 windows x86

d40391ee5183450092ed26706cbedad8

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetModuleHandleA
GetProcAddress

user32

EndPaint

gdi32

SetBkColor

advapi32

RegOpenKeyW

msvcrt

exit

Sections

.MPRESS1
Size: 125KB - Virtual size: 360KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.MPRESS2
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 552B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE