NEAS[.]cb3b45d83256af671037c7ba6e7da3e0[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.cb3b45d83256af671037c7ba6e7da3e0.exe
Size

66KB
MD5

cb3b45d83256af671037c7ba6e7da3e0
SHA1

607622e68b01275b7bb61cd17e4ef9b0439486f6
SHA256

e70f5f5398a831389cc76ab62f06ce993932952c5124e29f9ed8b9c808ee0fec
SHA512

68d6433b57869e61e083376ca0897549dbb27f19e58797c707bb32da422194eebcbc0fe6281629d52545667d8e304143594768b987431e57f56ea5767f8ba364
SSDEEP

1536:n1+BCGoMNNIdO23AA02+AQF9GHj0oBVUuLyOPgBKJZD3GDE:n1+BrXNNIdO2QVAQF9Qj0aLLyUg0JZD9

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.cb3b45d83256af671037c7ba6e7da3e0.exe

Files

NEAS.cb3b45d83256af671037c7ba6e7da3e0.exe
.exe windows:4 windows x86

63512d5f2a6e852e3cb35f1b22343e1a

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetLongPathNameTransactedW
GetLogicalDriveStringsA
SetStdHandleEx
GetBinaryTypeA
StartThreadpoolIo
RegSetValueExA
FreeEnvironmentStringsA
WakeAllConditionVariable
FreeLibraryAndExitThread
GetConsoleMode

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 51KB - Virtual size: 70KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE