NEAS[.]3ffdc41345fc85d09bc5e2dd93a73960[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.3ffdc41345fc85d09bc5e2dd93a73960.exe
Size

8KB
MD5

3ffdc41345fc85d09bc5e2dd93a73960
SHA1

501f99c1ef66324bf39ecd6c1979c8070dc901ea
SHA256

f71fb1dc39da43ef25238d29d8da472d07ac72e6424c417db92781cfa044df77
SHA512

8e81b44ca5f37ef4e2046fd7e80cf789d70dbf8f98e6ff54568a2a8fc2500b669993d62cf16f10f4429c198dae43309f0c4239157ac9f57bc7118276dc171890
SSDEEP

96:NRc6dTc3BKRGjrGK4aVSTmtXz5QLfuUN3UmPMzaMAwfqOmmgf24OZWdqw813cPX5:rSR44ITW4dxEeMgLmD13aFza4

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.3ffdc41345fc85d09bc5e2dd93a73960.exe

Files

NEAS.3ffdc41345fc85d09bc5e2dd93a73960.exe
.exe windows:5 windows x86

d0b8285184365a838ba34f4f2ef57766

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

wininet

InternetSetOptionW
HttpSendRequestW
InternetConnectW
InternetReadFile
HttpQueryInfoW
HttpOpenRequestW
InternetQueryOptionW
InternetOpenW

kernel32

HeapCreate
GetModuleFileNameW
DeleteFileW
CloseHandle
GetCurrentDirectoryW
GetTempPathW
lstrlenW
lstrcmpW
ExitProcess
GetFileSize
HeapAlloc
GetModuleHandleW
WriteFile
ReadFile
CreateFileW

user32

wsprintfW

shell32

ShellExecuteW

Sections

.text
Size: 1024B - Virtual size: 923B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 156B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ