NEAS[.]b2cc28df6e0ac7daedaadb3cd59a9170[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.b2cc28df6e0ac7daedaadb3cd59a9170.exe
Size

66KB
MD5

b2cc28df6e0ac7daedaadb3cd59a9170
SHA1

c889daf3512b21427f37a9dbf053a770d61f3f39
SHA256

b3880f8b910291faa61ca80e2051188d820b16bbc6f80658129e5d9c94ea8a98
SHA512

6ca6c6a6a971d6c9a10e72fd17dad7ac292e6225c4ac70e05af4f10416d70d1a26c5df712a45b3d702cc70062abf9711d95797b440960acc76bb13c5e9603239
SSDEEP

1536:dNmnGIUvA+a3DfuB+0g5kluwuNz3kYq0Pn1GP4QgTAhtCeQq3xFXA:+n2aTWB+D5kANkYq0n1K4zAhE6xFQ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.b2cc28df6e0ac7daedaadb3cd59a9170.exe

Files

NEAS.b2cc28df6e0ac7daedaadb3cd59a9170.exe
.exe windows:4 windows x86

38ef3a1366ab4bec1327d8222b553118

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

WaitForMultipleObjectsEx
SetConsoleActiveScreenBuffer
DelayLoadFailureHook
FindNextFileW
WriteProfileSectionW
DeleteVolumeMountPointW
TermsrvGetPreSetValue
_hread
SetProcessAffinityUpdateMode
BasepNotifyLoadStringResource

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 51KB - Virtual size: 70KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE