NEAS[.]c7330fc38573dbe91c6aabcaff3514a0[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.c7330fc38573dbe91c6aabcaff3514a0.exe
Size

320KB
MD5

c7330fc38573dbe91c6aabcaff3514a0
SHA1

722a234d60fecb9045e9c60cc0a204f7a400fbdc
SHA256

218f1ea3bed7bfaf878b22ad095c4080477f765b25903f5e29fbfcfe0d4bd42e
SHA512

a961f5511f49ea41d23138c741f39bd1f8da2aefa083abbb432d40a7bbbcf842dd17847bb65a0b5a2163a3b4f97210e4ed7f0233027c5643473f4089839b64f4
SSDEEP

6144:tR/Ar6dPR4HjUH2RfS155ONNXBuWoJBO9OMbHLkAqF7Ief9UmM7/uT:tR/Dvyy2EB0NxDIBuOFe7/uT

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.c7330fc38573dbe91c6aabcaff3514a0.exe

Files

NEAS.c7330fc38573dbe91c6aabcaff3514a0.exe
.exe windows:4 windows x86

49d2bb89719de68e94c563f6ba9e0579

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetVersion
GetModuleHandleExA
GetStringTypeExA
OutputDebugStringW
GetSystemWindowsDirectoryW
CreateWaitableTimerA
WritePrivateProfileStringW
DuplicateConsoleHandle
IsBadCodePtr
GetFirmwareEnvironmentVariableW

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.brdata
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tc
Size: 244KB - Virtual size: 244KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE