NEAS[.]cbcede9604f1a22a74c52294ab305340[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.cbcede9604f1a22a74c52294ab305340.exe
Size

66KB
MD5

cbcede9604f1a22a74c52294ab305340
SHA1

d86ea8501965ed6dd586879b4d4c0a73665bc66e
SHA256

a663734051aa056865fb62d82ef7940d92d790327ea893b41a93f11fc7a39305
SHA512

5e61c2148ae8a97572d76ed45ec53e6d6e50c0d4ff5ed7c982b64dfe0160e1c52298e1e86475f43d3847181c64b9f166456ec8dcfa56bc64d5e190b9c1682b7a
SSDEEP

1536:lnM22FXc9i493iwGX9gXpW837zbUqpDbHfPDDQee:lnMbXY3iwGY08PbUq1jrve

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.cbcede9604f1a22a74c52294ab305340.exe

Files

NEAS.cbcede9604f1a22a74c52294ab305340.exe
.exe windows:4 windows x86

aa2b67c788447c269408d1f512bc6879

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetPrivateProfileSectionW
SetComputerNameExA
DebugBreakProcess
LCMapStringA
BaseIsDosApplication
IsBadStringPtrA
GlobalReAlloc
GetLongPathNameW
WriteFileGather
DeactivateActCtx
GetLogicalDrives

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 51KB - Virtual size: 70KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE