NEAS[.]e2d3aabeb2e260795b4cc6caf4ef2a30[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.e2d3aabeb2e260795b4cc6caf4ef2a30.exe
Size

320KB
MD5

e2d3aabeb2e260795b4cc6caf4ef2a30
SHA1

a53e2744c666ee4ac4d6f393c45e9af44fc33420
SHA256

19f4af5784866b09ab12c5be3a00b978994c11691bd13d145e2ea0d987af7330
SHA512

f299c9836ca9ffd45c318f930e0dfbc7b260d6f4aab9f8b9a3aee30b4f018f818b19697f0c043f0122b2cad6740f9781c2a411d9b452dcd9a9284592d67b29a4
SSDEEP

6144:vUYmPs8oH2RfS155ONNXBuWoJBO9OMbHLkAqF7Ief9UmM7/uT:vUYmRe2EB0NxDIBuOFe7/uT

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.e2d3aabeb2e260795b4cc6caf4ef2a30.exe

Files

NEAS.e2d3aabeb2e260795b4cc6caf4ef2a30.exe
.exe windows:4 windows x86

0b370583e12c17bad038ae602172afe7

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetSystemRegistryQuota
SetDefaultCommConfigW
FindNextVolumeMountPointA
CreateNlsSecurityDescriptor
AddAtomW
RtlUnwind
SetupComm
CallNamedPipeA
GetCurrentConsoleFont
AttachConsole
SetConsoleIcon

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.brdata
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tc
Size: 244KB - Virtual size: 244KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE