NEAS[.]2e906b5505d195932f773d69ec41b9d0[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.2e906b5505d195932f773d69ec41b9d0.exe
Size

66KB
MD5

2e906b5505d195932f773d69ec41b9d0
SHA1

2d78d9bd22e6bccc0223a593efb0d658729b13f7
SHA256

a37228d192d0bc1e374dba1d20727dd9b0acdbc4fbf23c15cec6be7d3f1dd1d0
SHA512

8a3b15e92be2ef8011e57c1bac0b4f9b2c3ca6ae53d2b48ae399748db6672747a51a1eda717946328476648954dcf54f68478d42917e6ec80317b21dba3756d5
SSDEEP

1536:uJ094OelcmgOSbNa/JPrzo9UAoykt2DMf92Gya:uh9gvNc1rzo23yk+Kl

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.2e906b5505d195932f773d69ec41b9d0.exe

Files

NEAS.2e906b5505d195932f773d69ec41b9d0.exe
.exe windows:4 windows x86

1824797d2537a7f2f2cf750da7304adb

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetFirmwareEnvironmentVariableExA
NeedCurrentDirectoryForExePathA
RegOpenCurrentUser
GetMailslotInfo
ConsoleMenuControl
SetLocalPrimaryComputerNameA
GetLongPathNameTransactedA
GetDefaultCommConfigW
GetCurrentActCtxWorker

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 51KB - Virtual size: 70KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE