NEAS[.]9622b5759d05dae6a878f2b2d6fe3cc0[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.9622b5759d05dae6a878f2b2d6fe3cc0.exe
Size

256KB
MD5

9622b5759d05dae6a878f2b2d6fe3cc0
SHA1

25345b2546a9cf16c6ed3829ba07f06937f457f1
SHA256

1fafe3ffadc0f074585b36ef275f7897f8de28ae3e49a18c93d2c5c825c9e9b3
SHA512

3dee99a1164c01d96053a1eefe14c2c794e2a1cc9d8de9ce7c6581a7adf60e2b3e6209637d90b70f59996faca104368324080f29dcc60a0c4c922c61fc2237ca
SSDEEP

6144:KuS1k8u8rO9VtcT/6x4e+IYzHGr7rXWDCOU:KV618i9MSxx2HcyDCOU

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.9622b5759d05dae6a878f2b2d6fe3cc0.exe

Files

NEAS.9622b5759d05dae6a878f2b2d6fe3cc0.exe
.dll windows:4 windows x86

62abc3d6a265dd207722412223d0be71

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

mfc42

ord6059

msvcrt

_initterm

kernel32

FindFirstFileA
GetModuleFileNameW
GetModuleHandleA
LoadLibraryA
LocalAlloc
LocalFree
GetModuleFileNameA
ExitProcess

user32

GetDesktopWindow

advapi32

RegCreateKeyA

ws2_32

WSACleanup

shlwapi

PathIsDirectoryA

ole32

CoSetProxyBlanket

oleaut32

SysAllocStringByteLen

msvcp60

??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ

netapi32

Netbios

Exports

Exports

getKey

Sections

.text
Size: - Virtual size: 55KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.k0
Size: - Virtual size: 206KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.k1
Size: 248KB - Virtual size: 244KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 4KB - Virtual size: 244B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ