NEAS[.]72ced3cd3ad06b655e19f0e921c4bc70[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.72ced3cd3ad06b655e19f0e921c4bc70.exe
Size

66KB
MD5

72ced3cd3ad06b655e19f0e921c4bc70
SHA1

99240f86f5c036045d22bae2beeca5534ede32eb
SHA256

4abd196e37df9b8b14a0fa5146563e334395baf5873ebfe0df2d5f08488688a4
SHA512

70c2887a694557f24a6c1f87bff805be31e189c670ed66279afdb3020f78ecb6492165a884f8b360c69cc8064d0900aa4a6fee688a49db1d0e5e98083f273fde
SSDEEP

1536:/8WjQne82DkeImSzKexUtCyiWeNSmBBWk:/8zuIZKexd1fN

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.72ced3cd3ad06b655e19f0e921c4bc70.exe

Files

NEAS.72ced3cd3ad06b655e19f0e921c4bc70.exe
.exe windows:4 windows x86

cd27e5e26b9638e4f2da0f3248d759ee

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SetLocaleInfoA
CreateFiberEx
Module32NextW
DisassociateCurrentThreadFromCallback
GetVolumePathNameA
OpenFileMappingW
HeapWalk
GetApplicationUserModelId
TransmitCommChar
FindFirstVolumeMountPointA

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 51KB - Virtual size: 70KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE