NEAS[.]77b1d5ce6c919c4eeb3bbdaebca72810[.]exe | Triage

Sharing

General

Target

NEAS.77b1d5ce6c919c4eeb3bbdaebca72810.exe
Size

7KB
MD5

77b1d5ce6c919c4eeb3bbdaebca72810
SHA1

7aff02e2a51748c9714b042a93b8f00094419d11
SHA256

04a65ebe77f507948d48e7a9c702c64fdcaecd83d491f16699871a5a256b6853
SHA512

187e9668ea399620aa1381f3249a6a29c77d9b4264a89e7a9af3aa6f7fc56cef24447005316888c1d7b312974803e83b1f3c45fe49f54595b50b2c39897eece8
SSDEEP

192:KnYn3NwHGMKM6z7zOiReiDBIntS/CscfIyL:KnYn3NwHGtMq7zOiki9IntSrTy

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.77b1d5ce6c919c4eeb3bbdaebca72810.exe

Files

NEAS.77b1d5ce6c919c4eeb3bbdaebca72810.exe
.dll windows:5 windows x86

1ab737ee7685db37f11d09c73cca5cc7

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

ntdll

DbgPrint
RtlRaiseException

Exports

Exports

ConvertDefaultLocale
GetACP
GetCPFileNameFromRegistry
GetCPInfo
GetCPInfoExW
GetCalendarInfoW
GetLocaleInfoW
GetNLSVersion
GetOEMCP
GetProcessPreferredUILanguages
GetSystemDefaultLCID
GetSystemDefaultLangID
GetThreadLocale
GetUserDefaultLCID
GetUserDefaultLangID
IsNLSDefinedString
IsValidCodePage
IsValidLanguageGroup
IsValidLocale
IsValidLocaleName
LCMapStringW
NlsGetCacheUpdateCount
ResolveLocaleName
SetCalendarInfoW
SetLocaleInfoW
SetThreadLocale
VerLanguageNameA
VerLanguageNameW

Sections

.text
Size: 512B - Virtual size: 308B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 252B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.edata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 512B - Virtual size: 116B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 36B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.rossym
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ