NEAS[.]cb603c3af9dfb7084c8b2743da03ef20[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.cb603c3af9dfb7084c8b2743da03ef20.exe
Size

66KB
MD5

cb603c3af9dfb7084c8b2743da03ef20
SHA1

68020a9f7fdbc690e07bcb96b1f664056fc11659
SHA256

2d813f4b302d7eb3bfb313c6057e2e79bf44b30776f6553fab5fb944182d9518
SHA512

3bf586366339135ad327746174d92a4f319317b2956faa1dbe79f01e8062c94081968794622091c3712e453e99ce2c3d83569083771e9a3c7e2965016d287ae4
SSDEEP

1536:MAFN/GOwce/xwgOsJkWFCL8AJZgF0ICQlMF7U0tPWjd3TC1H9:XNXwTxwpsWWgY/bjMN/WxO1H9

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.cb603c3af9dfb7084c8b2743da03ef20.exe

Files

NEAS.cb603c3af9dfb7084c8b2743da03ef20.exe
.exe windows:4 windows x86

ac447ff11361c06f8767251122a0a758

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

BasepGetAppCompatData
Module32First
GetNumaAvailableMemoryNodeEx
FindNextVolumeA
OpenSemaphoreA
InitOnceExecuteOnce
DeleteVolumeMountPointW
FlushProcessWriteBuffers
CreateDirectoryA
GetCPInfoExA

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 51KB - Virtual size: 70KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE