NEAS[.]21e31e0f4cfded4b940fadd01748cb60[.]exe | Triage

Sharing

General

Target

NEAS.21e31e0f4cfded4b940fadd01748cb60.exe
Size

76KB
MD5

21e31e0f4cfded4b940fadd01748cb60
SHA1

05a8da119db62e2616e0a11054969fc63656731e
SHA256

1ada43ecd9c20bba64266c34563a5726c005b373eda6ab51da2394818c679381
SHA512

b9b1c42744b507a13e3158d46eb91e0f27f5edfaa74347cb3c7b1e1ea934e173cffce8fa67a464d9e4f5275091c0bef5f5bd562cbaa7e401de4b76e4b41f7402
SSDEEP

1536:7O3KbAXH/AdouO53qvTo1ORz9zlvmzTarfuesU/edhZKz/U85:7QKbvU059zA62e5ekT5

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.21e31e0f4cfded4b940fadd01748cb60.exe

Files

NEAS.21e31e0f4cfded4b940fadd01748cb60.exe
.exe windows:4 windows x86

f356347b3d05281cd69f33cd1139dc9d

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

OpenProfileUserMapping
GetSystemDirectoryA
VirtualAlloc
BaseDumpAppcompatCache
GetUserGeoID
SetVolumeLabelA
WritePrivateProfileStructA
RemoveDirectoryW
GlobalUnfix
GetConsoleInputWaitHandle

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.brdata
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE