NEAS[.]db81c82a60ff141253de8f52453b7f00[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.db81c82a60ff141253de8f52453b7f00.exe
Size

66KB
MD5

db81c82a60ff141253de8f52453b7f00
SHA1

6b40e962bf287974cc3a4ea91911605947ad36b3
SHA256

dda11554522434b7050b09251ad46700a3eca776f7d516fef2b8b09f917d2bec
SHA512

5ccfa2aa4d08817034b62a52ef8a06c26bb2f988042be9ea6cb6e0b1ebe7b8a07d8cb17ce495c8520d5a2d1f64fd1ab0b2408d2ea4207e1a582d09396f9f22b1
SSDEEP

1536:ZYtFRNzopSOVpENeQTUwcIDynXt0gLdL+OHsmOVHzS1fw6U33Q:mtFfzorpOUBFnXtPdL+OTwzh6UQ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.db81c82a60ff141253de8f52453b7f00.exe

Files

NEAS.db81c82a60ff141253de8f52453b7f00.exe
.exe windows:4 windows x86

fe0b573eba54512377f61f3739374000

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SystemTimeToTzSpecificLocalTime
Module32FirstW
GetDiskFreeSpaceExA
SetWaitableTimer
RegSaveKeyExW
DebugSetProcessKillOnExit
WriteConsoleInputVDMA
GetPrivateProfileIntW
RegLoadMUIStringW
RegDeleteValueW

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 51KB - Virtual size: 70KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE