NEAS[.]7568dd98f427d02029be7e4cbec5c070[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.7568dd98f427d02029be7e4cbec5c070.exe
Size

66KB
MD5

7568dd98f427d02029be7e4cbec5c070
SHA1

b685f661fdd6cf1c1ca71ec89cee836cac568bf4
SHA256

4a3e3e67377ae7a81a3db482e651a170461b15b2c1e1ad0bc65010b09ec8f2d3
SHA512

5781721896ee5eb073ee96fbf9db42221b9b95db0da7b86bfabe5cc54c8f7c5ff6de2f4b4e7409c97df37ad9042dba3cf65017e049a4d0b0781e37aaa9efdf31
SSDEEP

1536:9lu0J/2t0PMwCSUZJ/ZmyA1Qu0fe4XEP2u1aWHFA2t:97Jet0PxCZxmVqnfzXEHQUFr

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.7568dd98f427d02029be7e4cbec5c070.exe

Files

NEAS.7568dd98f427d02029be7e4cbec5c070.exe
.exe windows:4 windows x86

44869dd3e2b0235e0f0b3447f18b7fe9

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

PackageIdFromFullName
AdjustCalendarDate
VirtualUnlock
CreateWaitableTimerExW
GetExitCodeThread
SetTimerQueueTimer
GetConsoleOriginalTitleW
WerpNotifyUseStringResourceWorker
BaseGetNamedObjectDirectory

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 51KB - Virtual size: 70KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE