NEAS[.]332a1df6ea65a2109327d24cf70bd830[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.332a1df6ea65a2109327d24cf70bd830.exe
Size

63KB
MD5

332a1df6ea65a2109327d24cf70bd830
SHA1

03b0baf806a076a22efd22f62a5ef4e0f5b49e22
SHA256

1fc8e78d073b92f80bebc9c0587cc0d157f7eee2d84eaeaf19e8a43cadaf5d9b
SHA512

c8b41a4aae79b8c9f25f49a9d0eb652ae7f1931bfc96bbabbf72fa327b18a768fae82080b3cd607c9f7a40762b5095b68912d93037148def517e16a33cff9b77
SSDEEP

1536:pb3SkUz3BsjSGdexQayjOGihinKAsHMuNzV0m7HaVjh:R38z38nwxsh7KAsHlZz7HI

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.332a1df6ea65a2109327d24cf70bd830.exe

Files

NEAS.332a1df6ea65a2109327d24cf70bd830.exe
.exe windows:4 windows x86

c4a21934480cbed09d25cdeb98fa5deb

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateSemaphoreA
WaitForMultipleObjects
FreeVirtualBuffer
GlobalFindAtomW
LZClose
Module32Next
lstrcpyn
AddLocalAlternateComputerNameA
OpenFile
GetModuleFileNameA
GlobalDeleteAtom
SetCommBreak

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 49KB - Virtual size: 70KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE