NEAS[.]07210d52d2ea84c84c3c4d7918487cb0[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.07210d52d2ea84c84c3c4d7918487cb0.exe
Size

119KB
MD5

07210d52d2ea84c84c3c4d7918487cb0
SHA1

f4301ab31aa2646e0ef23131cf5d003326869941
SHA256

273091bfc3c57143a989eb0343b51da1ecfe62136507aca46c32ec629f8f9a7b
SHA512

e3e845d2e34359102c6072b77829d2d84cb70a6aa2b129508566f8f3f94f47c0f382da7e72e8f298ae1751081b222319011029c53f44f702e288cdc0a37e89b0
SSDEEP

1536:GLJXYyVztRBGDDGAJ4JsyH6N04wzPu2ojEyXaOhZVqJN+cNcJfS0a0ckoTdJa05H:GloytriJ4JLH6e4w6B5a36JK0bcznkAh

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.07210d52d2ea84c84c3c4d7918487cb0.exe

Files

NEAS.07210d52d2ea84c84c3c4d7918487cb0.exe
.exe windows:4 windows x86

31bea8101e7a9c8a8f6f9c56c0117464

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

AcquireSRWLockExclusive
ConvertNLSDayOfWeekToWin32DayOfWeek
GetSystemTimePreciseAsFileTime
ExitThread
UpdateResourceA
FindClose
AddLocalAlternateComputerNameA
GetCalendarMonthsInYear
UTUnRegister

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 105KB - Virtual size: 126KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE