NEAS[.]4ed2774aa05ed274e8f99516bb3b5e80[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.4ed2774aa05ed274e8f99516bb3b5e80.exe
Size

828KB
MD5

4ed2774aa05ed274e8f99516bb3b5e80
SHA1

224b7bd558cde3b759385a071001495ed1734bdd
SHA256

9764bcac2ca9a825c658ca11e4ad92da533829b2ae97c0850ccbaf05e1162e97
SHA512

14d717e7ee30fb24307395cc06062d9ecf7debc1b4d504283a4500dd6b02b8100f914d0c08259eb0ff467c69da86cd42d4db150c9abb52e18a76fbfe329d45e7
SSDEEP

12288:0osXOW6/eU/2LzWlCwKs00C6KysJ/VmfuQCLgACIiVSyY0dg/dpXDHZg6j4:0oNPQzoFK5IuQjDVm02Pq6j

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.4ed2774aa05ed274e8f99516bb3b5e80.exe

Files

NEAS.4ed2774aa05ed274e8f99516bb3b5e80.exe
.exe windows:6 windows x86

0aeb17582114501012edcd821aae1c87

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
LoadLibraryA
VirtualAlloc
VirtualFree
VirtualProtect
GetVersionExA
GetModuleHandleA
GetCommandLineA
GetStartupInfoA

msvcp140

??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@I@Z

iphlpapi

GetAdaptersInfo

vcruntime140

_except_handler4_common

api-ms-win-crt-runtime-l1-1-0

_initialize_onexit_table

api-ms-win-crt-math-l1-1-0

__setusermatherr

api-ms-win-crt-stdio-l1-1-0

_set_fmode

api-ms-win-crt-locale-l1-1-0

_configthreadlocale

api-ms-win-crt-heap-l1-1-0

malloc

Sections

.text
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rdata
Size: 826KB - Virtual size: 828KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE