NEAS[.]a7be692112d8c11e3fa3814fc3c70f70[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.a7be692112d8c11e3fa3814fc3c70f70.exe
Size

66KB
MD5

a7be692112d8c11e3fa3814fc3c70f70
SHA1

1b2a9d45ee49b26ce1df5bf22b5abbe2449e2663
SHA256

375d72e75a43d0afc1d086abcd85c2e74484a0d9c98e3aef65b97993ecd02086
SHA512

e805133ffa68f407c6a5bde8a15233525bf9ff5ed84a14820923ff77a2a9057602832c551bdc9e41c9c595cd4bc0d1a40df45e94a91e46af87c60d5d27ed0c12
SSDEEP

1536:vp34G5Zo0Yv3PDNe1zlkafmurXNjMOke5yc4:t4GE0QLw1z3OurXNjMVyb4

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.a7be692112d8c11e3fa3814fc3c70f70.exe

Files

NEAS.a7be692112d8c11e3fa3814fc3c70f70.exe
.exe windows:4 windows x86

7750b6c7624a98d38978a82a0a50f867

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetCompressedFileSizeTransactedW
EnumResourceTypesW
LZDone
GetSystemDefaultLangID
GetConsoleAliasW
FatalAppExitA
GetPrivateProfileStructW
LZOpenFileA
DebugSetProcessKillOnExit
SetConsoleIcon

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 51KB - Virtual size: 70KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE