NEAS[.]76b681fe7503c0414b37c451aa535d10[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.76b681fe7503c0414b37c451aa535d10.exe
Size

66KB
MD5

76b681fe7503c0414b37c451aa535d10
SHA1

d9178f911fa34b0a34e506a75baac7d6e6fbd4d1
SHA256

f4e1561f51982d8369e838e8555345e1bd15d4db8239dc4170066cb598ef7b33
SHA512

50af77aacdf132707818f534dfd278e340e3e2e4ea806d7aad17bc47bc8e05b2ed229a483d0634cdf8350ff323d19f1495881e15ac3b15d417446815c1df2e4a
SSDEEP

1536:tEPadjiSrwXkq1iZyQuMzBXJ/Ra6FSsQDxp1xbkCka9Td6m2F+UCVa:WDSkiZBBRBoxp1xkdaLmYs

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.76b681fe7503c0414b37c451aa535d10.exe

Files

NEAS.76b681fe7503c0414b37c451aa535d10.exe
.exe windows:4 windows x86

996812e799da49a8b3322c671f58a07f

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

_lclose
DeleteFileA
GetThreadSelectorEntry
QueryActCtxW
RemoveVectoredExceptionHandler
GetPrivateProfileStringA
SwitchToFiber
MoveFileTransactedW
NtVdm64CreateProcessInternalW
ClosePackageInfo

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 51KB - Virtual size: 70KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE