NEAS[.]7dba7ae4d81494b2db4143da6e22f220[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.7dba7ae4d81494b2db4143da6e22f220.exe
Size

66KB
MD5

7dba7ae4d81494b2db4143da6e22f220
SHA1

a024581b564db8bee504c4838ee073618d280594
SHA256

2aec0541ec9497ab65558b35f93b4f7a7c331108990a0197f46ae84c9dd64dbb
SHA512

b0175cc07f7c6986ff31e5b171fcc7e4d7813c477fb8486c61617c53d421aa3ea40b9a78b1e693ae538e6e608d079be8f3a7cb1a53836c579f6bb4ce7fe85e0d
SSDEEP

1536:f5UZTZdHeXud39LBvQmG5di5nkbgPft0SmuD9nVtqSe2R/jXIO600jKDYzQGiX:fg649V7G5AxkbgPft0SmqtqT2prouDYU

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.7dba7ae4d81494b2db4143da6e22f220.exe

Files

NEAS.7dba7ae4d81494b2db4143da6e22f220.exe
.exe windows:4 windows x86

6673c2fb54efaa3bb5c5a2b3d48fe2de

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SetThreadInformation
GetCPInfoExW
WerRegisterAdditionalProcess
GetCommProperties
GetPrivateProfileIntW
K32GetProcessMemoryInfo
GetUserDefaultGeoName
GetStringTypeW
K32EnumDeviceDrivers
SetConsoleHistoryInfo

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 51KB - Virtual size: 70KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE