NEAS[.]a0ee2f20621e1dd906dca7795b10d240[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.a0ee2f20621e1dd906dca7795b10d240.exe
Size

66KB
MD5

a0ee2f20621e1dd906dca7795b10d240
SHA1

fdcc628c37420a811be10e82cd2e5d972cd85bed
SHA256

f0e2b633afefdb479ea04dce63a6c29e61f063f3399d079d3082ca3c705eb6b4
SHA512

8af79145fcdc7adb0486d227c8851846364c43d0bb6df334fa7ceccd5b1fc3ff9820dec2bfb0fdd4261f0e69580df8f16addb8953dadafa52d89a1cd89029c93
SSDEEP

1536:PKR6GfTQs4javL4b9fvJ7zY+4fzfye3SyyJLmx4y5HPOrAIDVJ:PK8s7gKTzyJLmqy5vmdP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.a0ee2f20621e1dd906dca7795b10d240.exe

Files

NEAS.a0ee2f20621e1dd906dca7795b10d240.exe
.exe windows:4 windows x86

ed3db597f095659e034976c7e0703679

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

timeGetSystemTime
SetFileInformationByHandle
ExitVDM
CreateFileMappingFromApp
SetCriticalSectionSpinCount
FlsAlloc
TermsrvDeleteKey
GetModuleHandleA
GetSystemDirectoryA
GetConsoleHardwareState

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 51KB - Virtual size: 70KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE