NEAS[.]68b27f9879c5b1d6e11bf725515caaa0[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.68b27f9879c5b1d6e11bf725515caaa0.exe
Size

66KB
MD5

68b27f9879c5b1d6e11bf725515caaa0
SHA1

2a5a960faf7883a592ab10daebb3c1f3494aef31
SHA256

dbde9ba5a3a7ec9f0f85900fad531f9fd2571567ea439c8ac445735c8769eca2
SHA512

ef499fd380e8ff381c2e5be236569467253fc22499cd75bddd81acac127328a81622f8bca02e9a27389752e47865d780c76e25889c6949268dfb99949abe8680
SSDEEP

1536:PPakoXfBOjDU3k8ygwn8M5VeS16yi9k1Od+/Ef89/Fqw8SOf:naDgHT8AHeekCO8dqwM

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.68b27f9879c5b1d6e11bf725515caaa0.exe

Files

NEAS.68b27f9879c5b1d6e11bf725515caaa0.exe
.exe windows:4 windows x86

8699a9bbdd87710ee849754af5384adf

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

VerifyVersionInfoW
GetEraNameCountedString
FindFirstVolumeMountPointW
OpenFileById
FindNextFileW
OpenEventA
CreateHardLinkTransactedA
GetFileBandwidthReservation
timeGetDevCaps
CreateProcessA

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 51KB - Virtual size: 70KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE