NEAS[.]f6ef2b1cca1faa3702c8ae7c600860f0[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.f6ef2b1cca1faa3702c8ae7c600860f0.exe
Size

2.6MB
MD5

f6ef2b1cca1faa3702c8ae7c600860f0
SHA1

e50ffca1688ad7d20b5ab429f588f2b701114643
SHA256

80e82ee70b1000f01708500e02646a072ee74989dfc20cbbab043b25a4d79878
SHA512

526e97db060c6e97305594553670a7cde62c24143b69374ed18a60cbe6f62f90510d1e14be91a89eb54c349e9ea611b35ec91a49826738736febc6a3dcf36951
SSDEEP

49152:s9A0IV9zlG09e87njqklQ5U8HjGF3/gxpsbZHDUFZPczlMK9UiuYc4xVG8IT:CA5RlGWDjxlQ5UDQWnlc4q8

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.f6ef2b1cca1faa3702c8ae7c600860f0.exe

Files

NEAS.f6ef2b1cca1faa3702c8ae7c600860f0.exe
.dll windows:5 windows x86 arch:x86

764f0a185534930c1143dea9867e7a15

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

gdi32

SetTextCharacterExtra

msvcrt

putc

oleaut32

SysAllocStringLen
GetErrorInfo

shell32

ShellAboutA

user32

UpdateWindow
GetMessageA
ShowWindow
GetUpdateRgn

advapi32

RegisterServiceCtrlHandlerW
DuplicateTokenEx

mprapi

MprAdminTransportSetInfo

setupapi

SetupDiDestroyDeviceInfoList

kernel32

CloseHandle
TlsAlloc
SetConsoleWindowInfo
GetModuleFileNameW
VirtualAlloc
EnterCriticalSection
DeleteCriticalSection
GetExitCodeProcess
GetProcessHeap
GetBinaryTypeW
OutputDebugStringA
InterlockedPushEntrySList
Process32FirstW
WaitForSingleObject
GetSystemTimeAsFileTime
LeaveCriticalSection

lz32

GetExpandedNameW
LZInit
LZOpenFileA

version

GetFileVersionInfoA

Sections

.text
Size: 52KB - Virtual size: 50KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2.5MB - Virtual size: 2.5MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 48KB - Virtual size: 47KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 32KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ