NEAS[.]2e7c9a3a2f63ccc2d1c75069113ae9d0[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.2e7c9a3a2f63ccc2d1c75069113ae9d0.exe
Size

56KB
MD5

2e7c9a3a2f63ccc2d1c75069113ae9d0
SHA1

8bfe9323e0ce68912bed84c78037c60083668909
SHA256

8f0edb84368e7bffa9a82bedb6a121ef7d1d6512a830afa89e1ae6403b9be265
SHA512

c152eaad0039132af1a90d4617fdb81b4de3b9f8d0918d04a769fc3674711257b826e997f84948cedb837a983a3a9c91caabc138705d3cab70fdae96952fd206
SSDEEP

768:hGwKaVOCJzfsVckidmKDYO8hluKgJW4jaAZ43TzusZMl7QP3vqcqFjjK1AqxgXMl:htZdw0BjaAy3/usZMdIvbqKnI1QETk

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.2e7c9a3a2f63ccc2d1c75069113ae9d0.exe

Files

NEAS.2e7c9a3a2f63ccc2d1c75069113ae9d0.exe
.exe windows:4 windows x86

5f96cf727fec5eecc820fd6586cddb5c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadModule
FindFirstChangeNotificationW
WaitForSingleObject
RtlFillMemory
VirtualAllocEx
FindFirstChangeNotificationA
RegisterWaitForSingleObjectEx
InitializeCriticalSectionAndSpinCount
WriteProfileStringW

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE