NEAS[.]2680217d5e72146196bace0d035ec790[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.2680217d5e72146196bace0d035ec790.exe
Size

119KB
MD5

2680217d5e72146196bace0d035ec790
SHA1

555cd446575509009ac6a24b34c7ebe8dc31be34
SHA256

f1f990e3bdd44a13dcc32daa9eee38c6980be2249025434bc76ca151354b534c
SHA512

1986c7b619ecaddcb8a9934dd794a8bffccaf55192261c5aeb56aa6f5288d0e8c86a21e135061ac6301295d7778e1958fb734a0fc42d021bd6b6deb244777fc0
SSDEEP

3072:Ecrga6p/oMOHKfgmIqRpbVOdQNxUWxSQQ39pOCq:Lka6JhOqfBIqp+RQAKCq

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.2680217d5e72146196bace0d035ec790.exe

Files

NEAS.2680217d5e72146196bace0d035ec790.exe
.exe windows:4 windows x86

7aba620c9b2d0e50b97c5013721a4e9f

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetCalendarSupportedDateRange
RegGetKeySecurity
SetProcessShutdownParameters
GetCompressedFileSizeTransactedA
CallbackMayRunLong
GetProcessMitigationPolicy
IsBadCodePtr
WritePrivateProfileStructA
GetBinaryType

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 105KB - Virtual size: 126KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE