NEAS[.]e79901c34790d99737de2adcd958b1a0[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.e79901c34790d99737de2adcd958b1a0.exe
Size

66KB
MD5

e79901c34790d99737de2adcd958b1a0
SHA1

6424c22825ec18c205d723c7213ea2b387cab5da
SHA256

5e4d3a8fd7acae4303685be6837d2e43f608bb383501e6e7f34718088fb87165
SHA512

8992090d88f34814287e03b5cae473e786ad82aa3877003b0bfe946ce82bcfa2275530c1f606a83d5c4bfa5ebdd9c31adabbd67160effa6bc7bd2fbae2bdfc24
SSDEEP

1536:6F2TYhpOZG0BuI/wvsmt/5+UfnFqTae9Gi17gH+O138Mp:XTwpKG0EI/wvl/5JP4TZj7A138Mp

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.e79901c34790d99737de2adcd958b1a0.exe

Files

NEAS.e79901c34790d99737de2adcd958b1a0.exe
.exe windows:4 windows x86

5a82484a91323811a7c2aca3a886d590

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

Heap32Next
BasepAnsiStringToDynamicUnicodeString
WaitForThreadpoolWorkCallbacks
LoadPackagedLibrary
SetCurrentConsoleFontEx
CancelIo
TermsrvOpenUserClasses
FileTimeToLocalFileTime
TermsrvGetPreSetValue

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 51KB - Virtual size: 70KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE