NEAS[.]8de74e8b42a894733adde419bc7b58c0[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.8de74e8b42a894733adde419bc7b58c0.exe
Size

6KB
MD5

8de74e8b42a894733adde419bc7b58c0
SHA1

9705b019bb1faf970e369eb118a731bd0c21e9a0
SHA256

d9a4913110d9f2c0e577e22b5806ecbd99f8d9544bcebab290ede87baefdff60
SHA512

4e163d0296f596820856d119dd121b8242f69fc94d3aed75d4cd6b1410bcaeba93c20b47d77adfe526d9831510f31e4f3d5033b14d52a406578b464a9174a525
SSDEEP

96:wj5XgAH1gtnYbnp5N0NAWQgh3jWRdi727ffl90HwA:GNn+nYbnp5Rgt6di6fJA

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.8de74e8b42a894733adde419bc7b58c0.exe

Files

NEAS.8de74e8b42a894733adde419bc7b58c0.exe
.exe windows:4 windows x86 arch:x86

b55f776e57c6a6e791d3ddbe3178ef57

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

MessageBoxA

kernel32

LoadLibraryA
FreeLibrary
lstrcatA
lstrlenA
ExitProcess
VirtualAlloc
GetProcAddress

advapi32

RegQueryValueExA
RegCloseKey
RegOpenKeyExA

Sections

.text
Size: 1024B - Virtual size: 534B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 398B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ