NEAS[.]ce1ea4b2cd5ca69a81cd15d6ec4e9b50[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.ce1ea4b2cd5ca69a81cd15d6ec4e9b50.exe
Size

119KB
MD5

ce1ea4b2cd5ca69a81cd15d6ec4e9b50
SHA1

3e9025d8a2dcbabdb459cbcc1dc4334d13a5dfc2
SHA256

3b7fdfbfa3438be937c26bfb46813657791398ed660bf06076953a5e9271cbe9
SHA512

602ebc07f82325b3ccb98176a4e9812fc561799f4e8f18b97c16af124f4ed25f6575196d2a7cf85324f21eeeace21612e10faeef9437489de35740ae09310a86
SSDEEP

3072:vU5gHRa2JraU0JSHfvAuzKej/kFRg7BjMhEsgs6X:vUmE2JraU0Jenj8R+ByG

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.ce1ea4b2cd5ca69a81cd15d6ec4e9b50.exe

Files

NEAS.ce1ea4b2cd5ca69a81cd15d6ec4e9b50.exe
.exe windows:4 windows x86

3ebca772c4c4606e3db072cf27b039b6

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

VDMConsoleOperation
GetConsoleOriginalTitleW
IsWow64GuestMachineSupported
InterlockedFlushSList
timeBeginPeriod
LoadPackagedLibrary
AddRefActCtx
VirtualProtectEx
SetFilePointerEx
SetStdHandleEx

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 105KB - Virtual size: 126KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE