NEAS[.]07916d89b4f5ced84c3f4542fc301900[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.07916d89b4f5ced84c3f4542fc301900.exe
Size

297KB
MD5

07916d89b4f5ced84c3f4542fc301900
SHA1

1bb4571bb7668c68a8afff61c954ebb2133f5d3e
SHA256

2c957127573e65ff1e8cea35d118dcf6118c64bedc134f3c8245c5d6ad7e8e12
SHA512

cc6ce151dbadebcfd57003c162a24fb32645825226870760f77145fde2a0e71784dca20d01603442fa595002b9a60699ef6754af0fc7e60e3a8520498501c1af
SSDEEP

6144:0RIOnicZ7tD7vy7rSxqewCcE3bRK3PTgvaOwXWlBtg/ng:0RImLSSYtxPUhR9g/ng

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.07916d89b4f5ced84c3f4542fc301900.exe

Files

NEAS.07916d89b4f5ced84c3f4542fc301900.exe
.exe windows:1 windows x86

eb85f9841caba6951fdea133fd00eec3

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
LoadLibraryA
RtlUnwind
lstrlenA
GetModuleHandleW
CloseHandle
GetCurrentProcess
GetStartupInfoW
GetLastError
lstrlenW
GetVersionExW
LoadLibraryW

crtdll

__GetMainArgs
exit
raise
signal

user32

SetForegroundWindow
LoadStringW
SendMessageW
MessageBoxW
DefWindowProcW

advapi32

RegOpenKeyExW
RegQueryValueExW
RegCloseKey

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 7KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 179KB - Virtual size: 179KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 988B - Virtual size: 988B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ