NEAS[.]d7f8cf2298c4b66cab75cb325a126720[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.d7f8cf2298c4b66cab75cb325a126720.exe
Size

66KB
MD5

d7f8cf2298c4b66cab75cb325a126720
SHA1

589ce53825678640193fb3b143847ede43a90304
SHA256

6add2e1175568ac849d1e64b66d8486822430cf594b9ae6bd0bfad73f14e8314
SHA512

c82c89c6520176d763f280b48a81011e4882b5393110d6a00c103aa3645b3723b861819f0a09ba6db98abc5c65dbc9030a27d3f44f6ac5a1ce91e7ff5f2d27ff
SSDEEP

1536:IaRR8hUHET3oGfIUhKralAPB557YOZsZ+gTUi6M:IxhGm3EUhKraSPB/YOi+gT8M

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.d7f8cf2298c4b66cab75cb325a126720.exe

Files

NEAS.d7f8cf2298c4b66cab75cb325a126720.exe
.exe windows:4 windows x86

777cb4c995eccdf600840cef6f3bb7e6

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetNLSVersion
GetFinalPathNameByHandleA
BasepCheckWebBladeHashes
CreateJobObjectW
Wow64GetThreadSelectorEntry
AppPolicyGetCreateFileAccess
WriteProfileStringA
SetEnvironmentStringsA
GetProfileIntW

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 51KB - Virtual size: 70KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE