NEAS[.]76c9e6f8907aae78776a5cba14c97ee0[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.76c9e6f8907aae78776a5cba14c97ee0.exe
Size

66KB
MD5

76c9e6f8907aae78776a5cba14c97ee0
SHA1

e83356966eac394f89f3beea3ba01ffb20f772cf
SHA256

3a8129eb842c39295a21d42c895562f5cc10c37d3eba44067664dde099699901
SHA512

e1013cf0a4038e607956f34aa0e7d6009e0e8022a15f82e3ac7f513f45aff57703575115c05025b7ccb891edafcecdc5b0c9b698e001fbc2812bcc4f164f66e7
SSDEEP

1536:ycc5kTca/15a1AZgjF+Lq8khRX67dmDOwBtEyiabiB2MM4:HJbqkgjALqvRhDnBW4rT4

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.76c9e6f8907aae78776a5cba14c97ee0.exe

Files

NEAS.76c9e6f8907aae78776a5cba14c97ee0.exe
.exe windows:4 windows x86

62b3a0d26aed0aba79a45d7ddfcc0c92

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetCommMask
GlobalWire
SetLocalTime
IdnToAscii
K32GetDeviceDriverFileNameA
WakeConditionVariable
FindResourceA
MapViewOfFileEx
BasepAppXExtension
CreateDirectoryTransactedA
CloseConsoleHandle

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 51KB - Virtual size: 70KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE