NEAS[.]a2530efbabdc8f3ced11dc641db54930[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.a2530efbabdc8f3ced11dc641db54930.exe
Size

66KB
MD5

a2530efbabdc8f3ced11dc641db54930
SHA1

b7d13c6f4a9eb479faa861363e6e06fc52c1036b
SHA256

20daf040f310cd7683a14a4e84108117364dea9e871c9628386381b4a77b0de0
SHA512

ce70e7614e7178d408575eb0525ce7499da605c85f3e6f87eb4a6acc472c349e0d5becd53271d1ee65249e3b42828232ba72c3a8605f05d8aedda26dc01d496e
SSDEEP

1536:hBwJDZhaEqz5ED2Y0RzHbtyI8Q2Wf++PGUz:fwJLMdED2Y0R7tys2sb

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.a2530efbabdc8f3ced11dc641db54930.exe

Files

NEAS.a2530efbabdc8f3ced11dc641db54930.exe
.exe windows:4 windows x86

475da395ac3c2f1181aff8f47e387bef

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

FindNextVolumeMountPointA
FatalAppExitA
LocalUnlock
GetExpandedNameA
GetShortPathNameW
AddScopedPolicyIDAce
ReclaimVirtualMemory
CreateMutexW
Wow64DisableWow64FsRedirection
GetTimeZoneInformationForYear

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 51KB - Virtual size: 70KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE