NEAS[.]d7c84426166bec589fada037699bd710[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.d7c84426166bec589fada037699bd710.exe
Size

66KB
MD5

d7c84426166bec589fada037699bd710
SHA1

fc5677bb250fc9eacb00ba3c5b62fb891cba7379
SHA256

cdc307d7a07373c58ab52b6ed2283ed2fa228011d65e801cf9c29e1620d88d8d
SHA512

b390f21e8cde3ac6daa5aae289c479b4dd547083fc7b3bc35e5fb25dcaa97b79d05afd530348c971e3df3c6b8095773b92002189893c0f804b66c3cfe1eba5c9
SSDEEP

1536:nv+8DAekSKpn6X7qBbYcz/I4oWbjomUgnmADe8DmJO:v+8DePn6LqBb1z/IlWbMNQ0CmQ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.d7c84426166bec589fada037699bd710.exe

Files

NEAS.d7c84426166bec589fada037699bd710.exe
.exe windows:4 windows x86

c8938efacd14ee0608704bbafc9c5010

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetConsoleCommandHistoryLengthA
EnumerateLocalComputerNamesW
AreFileApisANSI
GetCurrentActCtx
QueueUserWorkItem
GetCurrentPackageInfo
IdnToUnicode
BaseReadAppCompatDataForProcessWorker
GetNumberOfConsoleMouseButtons

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 51KB - Virtual size: 70KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE