NEAS[.]d13777dd8935642bbca586cf8951c390[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.d13777dd8935642bbca586cf8951c390.exe
Size

66KB
MD5

d13777dd8935642bbca586cf8951c390
SHA1

33ebf81cba3ff30484587de0d45d9efa8a2b3417
SHA256

7552dba53a8706ec20cb919ef3c5fb87999afa02db0cc446ca398a35fe8e7a5d
SHA512

9697196c4d35e5a063a3b3aa9aa6c42815386812772c235e92ef25708ef5c0d1cf9f6dffb7ebf22f2899696ee4cacbe5d07be75a96ab23bbd5655561766c7314
SSDEEP

1536:94M1aCz0MzHaW0ZhpHH+5Dg9qu9MqbQN7kCXWML24PyYFcI3fn:94AaCyeDWqCRbAHfL24KYFZf

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.d13777dd8935642bbca586cf8951c390.exe

Files

NEAS.d13777dd8935642bbca586cf8951c390.exe
.exe windows:4 windows x86

32258394318470c7f925e08070c5b095

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

BasepMapModuleHandle
RegDeleteKeyExW
CreatePrivateNamespaceW
GlobalAddAtomExA
Wow64Transition
EnableThreadProfiling
ReleaseMutex
FindFirstFileExW
TermsrvGetPreSetValue
CreateActCtxA
CreateSemaphoreExA

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 51KB - Virtual size: 70KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE