NEAS[.]d2534ccd478d3f5919f5425495b25d90[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.d2534ccd478d3f5919f5425495b25d90.exe
Size

66KB
MD5

d2534ccd478d3f5919f5425495b25d90
SHA1

672b9d9a90852977caedc3c728a69401dc7d1272
SHA256

87fd05b665da0f3b9ebc2c1a3d98c78b298c66855732b969ecd3e9ca1a490e65
SHA512

4f10fe9dfc1e4b5e9b1915de606f8d5b47810f5630a6f2819287fdba81c5cdc5e197d07d15bb67a598e17c935b71ac70f4c15fd8a26ac6a5366fbd339ab21b3d
SSDEEP

1536:8pgVT0l1eS0fdBRe+dzIx3GzKNh9npDHYVKkB7+eiDHqJ/fXkeW1Qs:8pE4NUJJI9GzKT9xHr9Tuf/Wx

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.d2534ccd478d3f5919f5425495b25d90.exe

Files

NEAS.d2534ccd478d3f5919f5425495b25d90.exe
.exe windows:4 windows x86

7836e477f48276443775ffd577f5e90c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

IsBadCodePtr
GetThreadErrorMode
GetFileAttributesA
IsWow64Process2
CopyLZFile
WritePrivateProfileSectionA
GetCommandLineW
K32GetModuleFileNameExA
GetLongPathNameTransactedW
UnregisterWaitUntilOOBECompleted

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 51KB - Virtual size: 70KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE