NEAS[.]c326e4c2bd2374e05554e753154fbf40[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.c326e4c2bd2374e05554e753154fbf40.exe
Size

66KB
MD5

c326e4c2bd2374e05554e753154fbf40
SHA1

033f54c4bb688e77a2b1229443ca5999c102e59d
SHA256

2514629c0336f7e190f14fdf244274d7374e5c4cc4bbe3e7827af3df98ae0dbc
SHA512

54fc8689170bf5ddc2dc50d7a092f66b017e4c364c986d50b6adf5bafc2aae1f4c1e3e9a5e08cb2dad682b26511f813278f68cdc48dfa712f1c2277536fe0770
SSDEEP

1536:oT/HgBwPF6esMtrfZH5X/cj0/vQ9jUkrqwOkoMl:mfzJfZHdvvQJjrxHl

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.c326e4c2bd2374e05554e753154fbf40.exe

Files

NEAS.c326e4c2bd2374e05554e753154fbf40.exe
.exe windows:4 windows x86

a0bc7a8d55526cc011970f72a1b50657

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SetFileApisToOEM
GetLogicalDrives
GlobalAddAtomExW
IsWow64Process
SetPriorityClass
GetThreadSelectedCpuSets
GetCachedSigningLevel
GetUserGeoID
RegNotifyChangeKeyValue
FlushViewOfFile
GetModuleFileNameA

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 51KB - Virtual size: 70KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE