NEAS[.]d7f7dc7d3eb37913d03656141f7d1000[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.d7f7dc7d3eb37913d03656141f7d1000.exe
Size

2.0MB
MD5

d7f7dc7d3eb37913d03656141f7d1000
SHA1

39516a99a0f42fe89c0096bfe6ae0e3c430b1f0c
SHA256

72b16f68caa94a2bdde909f9ef12bc196a561ef4813f841c3d6f3c56cb06ec6f
SHA512

da7a265ad634743464997dd79f2e969393d1ae5d45e2a40eaa9454614e67ec4a7b6336ac9eb1359e4ca7975ce0c1d65cd0482295c9e346dce59187e8f5bf9e67
SSDEEP

49152:3Q0xwUccjkO6Uj2MEtC1V6e30ygu9ngtwkgNHiW3OjfEIKIt:QdcIFsEEh30Qgtw/ZOjfDKIt

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.d7f7dc7d3eb37913d03656141f7d1000.exe

Files

NEAS.d7f7dc7d3eb37913d03656141f7d1000.exe
.exe windows:5 windows x86 arch:x86

23a78b0bc0363a0ed7bdc026efd54b69

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

comctl32

ImageList_ReplaceIcon

gdi32

BitBlt

kernel32

CloseHandle

mfc42

ord258

msvcrt

__set_app_type

oleaut32

VariantClear

shell32

ShellExecuteA

user32

DrawIcon

winmm

PlaySound

iphlpapi

GetInterfaceInfo

psapi

GetMappedFileNameW

advapi32

RegOpenKeyExA

Sections

.text
Size: 896KB - Virtual size: 1.4MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.crack
Size: 1.1MB - Virtual size: 1.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.crack
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ