NEAS[.]ec22d78c3cc804880fcbaf8ad462fe80[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.ec22d78c3cc804880fcbaf8ad462fe80.exe
Size

320KB
MD5

ec22d78c3cc804880fcbaf8ad462fe80
SHA1

a552785fa94262bd6a261ec85c6ffbeab325231a
SHA256

1a6f6861f004575dca94882e37790750c259503cbfb381a3bc181daae4a37efc
SHA512

56a036f463b0058d36352c4d13dea04c3bddd62461be97c8516418ae3da654e83d48d18d0d2fc7ee7f5735843b09db5096c5cb11317f0214bf13885115a67745
SSDEEP

6144:d1RPdw6otH2RfS155ONNXBuWoJBO9OMbHLkAqF7Ief9UmM7/uT:F02EB0NxDIBuOFe7/uT

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.ec22d78c3cc804880fcbaf8ad462fe80.exe

Files

NEAS.ec22d78c3cc804880fcbaf8ad462fe80.exe
.exe windows:4 windows x86

46f0f9d1b0d155a13571f155edd8759a

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

UTRegister
WriteConsoleOutputCharacterW
GetLongPathNameW
WaitForDebugEvent
FlushFileBuffers
WTSGetActiveConsoleSessionId
SetSystemTime
InterlockedExchangeAdd
CheckNameLegalDOS8Dot3W
SetConsoleCursor

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.brdata
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tc
Size: 244KB - Virtual size: 244KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE