NEAS[.]d3893d565e2e10ed1322925147f21dd0[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.d3893d565e2e10ed1322925147f21dd0.exe
Size

171KB
MD5

d3893d565e2e10ed1322925147f21dd0
SHA1

c621bb11776e3fef7696cf18cf47259a5e1813dd
SHA256

1313ac49342a6d467fe2e2313076ff98e0a19711cc7bcd235adbe8e1045969f9
SHA512

4ed2a03271c60fdb8f341356be5dc0fa93ad618897fecbb73ef96a40504d44bbc459a5752ffb149d4807580df7e1853f2fcf02ccbff3f04e9dae703edd18ba3e
SSDEEP

3072:vjNBSrod9CIF9IOXBj8F4fCmT/QY9akFaLTXlyieaBnyDOEMDELD2XSF:vX5jF73fCuHYpjlrBnJAD2Xk

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.d3893d565e2e10ed1322925147f21dd0.exe

Files

NEAS.d3893d565e2e10ed1322925147f21dd0.exe
.exe windows:1 windows x86

c5f1e2c930cbbf7abd56f59541a0868a

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
LoadLibraryA
GetModuleHandleW
lstrcpyW
CloseHandle
GetCurrentThreadId
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetStartupInfoW
GetLastError
GetCommandLineW
lstrlenW
CreateFileW
GetVersionExW

user32

RegisterClassW
GetActiveWindow
SetWindowLongW
LoadStringW
SendMessageW
wsprintfW

advapi32

RegOpenKeyExW
RegSetValueExW
RegCreateKeyExW
RegQueryValueExW
RegCloseKey

Sections

.text
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 132KB - Virtual size: 132KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 208B - Virtual size: 208B

IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.bss
Size: 409B - Virtual size: 409B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE