NEAS[.]2a29ec0951f07ee5362ca47c1c1c1f90[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.2a29ec0951f07ee5362ca47c1c1c1f90.exe
Size

92KB
MD5

2a29ec0951f07ee5362ca47c1c1c1f90
SHA1

3d836273b541a7130f864672733db32cc13da195
SHA256

1f048e7c9b9c861caba86574348143285e8604d8339f4f09898db74a1318b417
SHA512

92f9b18decc9ac297fc5d6ea7a99dd1e5c9fe68ab383a70692ac1cc194cce461ff1907917c3f71d2cd69c2e1afc5bcdbf8fd887ecd29e402170c40e4687d673d
SSDEEP

768:yINEzmppFRE925OrmaNctd1zSLOqMdd+KveSLkm+JbXqgM1PbAl9V:tIm7FREUydLOqMdbvem+xXdqPbI

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.2a29ec0951f07ee5362ca47c1c1c1f90.exe

Files

NEAS.2a29ec0951f07ee5362ca47c1c1c1f90.exe
.exe windows:4 windows x86

b461a6333aae27af96b6a39d4851a1f1

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

Sleep
GetLastError
VirtualFree
CloseHandle
GetModuleHandleA
WriteFile
GetThreadPriority
GetProcAddress
VirtualAlloc
GetTickCount
DeleteFileW
RtlUnwind
HeapReAlloc
HeapFree
HeapAlloc

user32

EnableWindow
SetFocus
DestroyWindow
SendMessageA
LoadBitmapA

ole32

CoInitialize

ws2_32

send
select

Exports

Exports

?XM2LPARSE@@YAKK@Z

Sections

.text
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 68KB - Virtual size: 66KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.const3
Size: 4KB - Virtual size: 48B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ