4919a56637503bd7742a9cfd7f1df680_NEAS | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4919a56637503bd7742a9cfd7f1df680_NEAS
Size

28KB
MD5

4919a56637503bd7742a9cfd7f1df680
SHA1

345ba0f5bdb0285c1b9b5418944cac8233185d5e
SHA256

0254995eca8b590f07fcdb8dd8c3f5a4a3bf110dbdad0230f3aae550d98aa614
SHA512

1750315bcd1b4a536925cd449a014a969fe23a103ee084afd34154c862b2c4017cabd4b8ea2c79690327d27efab646a7751b7f24494661c19309e20ad8c8307e
SSDEEP

768:VqPJtMA6C1VqahohtgVRNToV7TtRu8rM0wYVFl2g5coW58dO0xXHV2EwhSahGCoq:VqsA6C1VqaqhtgVRNToV7TtRu8rM0wYo

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4919a56637503bd7742a9cfd7f1df680_NEAS

Files

4919a56637503bd7742a9cfd7f1df680_NEAS
.exe windows:4 windows x86 arch:x86

3b884b93be1eaa99038bd3acaaa5f577

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

RegSetValueExA
RegQueryValueExA
RegOpenKeyExA
RegCloseKey

kernel32

GetFileSize
WaitForSingleObject
CreateThread
HeapFree
DeleteFileA
ExitProcess
lstrcmpiA
lstrcatA
GetWindowsDirectoryA
HeapAlloc
GetProcessHeap
Sleep
GetModuleFileNameA
CloseHandle
GetLastError
CreateMutexA
HeapReAlloc
FindClose
FindFirstFileA
GetProcAddress
LoadLibraryA
CreateProcessA
CreateFileA
ReadFile
WriteFile
FlushFileBuffers

wininet

InternetOpenA
InternetCloseHandle
InternetReadFile
InternetOpenUrlA
InternetSetOptionExA

Sections

.text
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.htext
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE