NEAS[.]d2739a98beb391b341155cd6dbee1060[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.d2739a98beb391b341155cd6dbee1060.exe
Size

112KB
MD5

d2739a98beb391b341155cd6dbee1060
SHA1

31b2bcd0343598590ef0316ce5dff8de84ec99f3
SHA256

68f197428f43cea84c9ba0ca048e90c6e76aa83adeda6a6aacec3a48f2388fc3
SHA512

09ede872d62ed78071f9e5de455934c2a831352cca4de237d8c732fc02cb0bf2fb6ea4b89143e3340aa49164f38213231e6684d4a57a6ae1c4ecf9a3e8a948fc
SSDEEP

3072:WHlHHHgXHAH8bIatdis5n2ThWsNexPnCrnfbgbntW5n2ThWsNexPnCrnfbgbntDq:xRbZ/iqnkP+6bfbSankP+6bfbSxbSj

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.d2739a98beb391b341155cd6dbee1060.exe

Files

NEAS.d2739a98beb391b341155cd6dbee1060.exe
.exe windows:4 windows x86

a2f4ce37c85a0216f3e53d5555dfa0b9

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

EnumDateFormatsExA
GetConsoleInputExeNameA
CreateEventA

user32

CharPrevA
GetPropA

gdi32

ExtTextOutW
TextOutA
GetTextFaceA

Sections

.code
Size: - Virtual size: 27KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.masm
Size: 20KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.share
Size: 1024B - Virtual size: 858B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 329B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ