NEAS[.]a5d2b1c1ffa76196e63cb233a39df5b0[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.a5d2b1c1ffa76196e63cb233a39df5b0.exe
Size

145KB
MD5

a5d2b1c1ffa76196e63cb233a39df5b0
SHA1

a808c41b74ac23b56e8e2ad2932eb77231a07973
SHA256

a22d1f86ba6e98470878be604bb939718270ad2466b5fd2895234fb4f6adfd09
SHA512

8ecc2037de42627331de78e3c0a4ec65436354d136f239a33a8afc8ee3732245bad51e936c880779761e0fcd666af7aae0967c90063163de1a9167402ab99613
SSDEEP

3072:UFiXoQTi/vkN/7FIIg+OnbNpEvNzPfWIiJP4EsrrLSOZtCy:Uc4QTiEN/7LtAb7KNzPEPTsXLiy

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.a5d2b1c1ffa76196e63cb233a39df5b0.exe

Files

NEAS.a5d2b1c1ffa76196e63cb233a39df5b0.exe
.exe windows:1 windows x86 arch:x86

01fe59aa5709aef888d837c5be5cf77d

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

crypt32

CryptBinaryToStringA

kernel32

GetProcAddress
LoadLibraryA
RtlUnwind
VirtualProtect
GetModuleHandleW
CloseHandle
WriteFile
GetCurrentProcess
GetLastError
GetCommandLineW
CreateFileW
GetVersionExW

user32

GetWindow
LoadStringW

crtdll

__GetMainArgs
exit
raise
signal

setupapi

SetupDiEnumDeviceInterfaces

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 40B

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 124KB - Virtual size: 124KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 936B - Virtual size: 936B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc2
Size: 204B - Virtual size: 204B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE