NEAS[.]ea78b42545163b1569999e1bcf2cc880[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.ea78b42545163b1569999e1bcf2cc880.exe
Size

66KB
MD5

ea78b42545163b1569999e1bcf2cc880
SHA1

28ae7f9721ad409bd71e750989273ce82293d4b6
SHA256

9633b71644e790878633d39b2f02cb6156bdc8e5015aa0b01c72049f85be18d2
SHA512

eda1f80ddab46fc44d8eefdc89fb76e1f35641ccc94a1e0b58bab2b94aacdaca1846d2146f3ffde63f03a7e63dca68616106b58f06c6241fbd9dc6b6a2f515e0
SSDEEP

1536:XQwtXtXhIrt6vD0PXjcQb/MuG5Jfgpp5qR3JjWniSvr:XQKRc6vYf9bXGMpnq9hwTz

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.ea78b42545163b1569999e1bcf2cc880.exe

Files

NEAS.ea78b42545163b1569999e1bcf2cc880.exe
.exe windows:4 windows x86

c7e90421e1564a87e66f3dd8733f64d2

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProfileSectionW
UnmapViewOfFile
SetThreadAffinityMask
CreateSocketHandle
SetPriorityClass
lstrcat
GetLargestConsoleWindowSize
QueryPerformanceCounter
CompareStringA
RemoveDirectoryTransactedW

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 51KB - Virtual size: 70KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE