NEAS[.]ac3d1cc98287dfb754a6b9f21dfd91d0[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.ac3d1cc98287dfb754a6b9f21dfd91d0.exe
Size

119KB
MD5

ac3d1cc98287dfb754a6b9f21dfd91d0
SHA1

78eab8c9e3107097041cf57e350a1c7b3e0c75db
SHA256

6fa3df60d1132c072ee85a52e3698a4b7b27db654a24f1a92a947e31d4205c47
SHA512

7f2593f73291b3308179ba0b13fd1254676d4bfa4e72684adc2c2c0588ab6e6b81f977d08dcf29a5766f88e6216e03c16ba880a7ee5b0b48a37a63493e69b659
SSDEEP

3072:Ej+pZrpBPNFPySYx3yVApUfsl4Cj3W5SmKh2QE4lfspYo9ddOYKD:E6phfNNySYx3uXCY8t0mo3IYKD

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.ac3d1cc98287dfb754a6b9f21dfd91d0.exe

Files

NEAS.ac3d1cc98287dfb754a6b9f21dfd91d0.exe
.exe windows:4 windows x86

93012b6ff0ddfae5c9d79c539da45746

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

lstrcmpW
GetDateFormatAWorker
GetConsoleWindow
CreateHardLinkTransactedA
SetDllDirectoryA
GetDllDirectoryW
ZombifyActCtx
CreateSocketHandle
IsDebuggerPresent
ScrollConsoleScreenBufferW
IsNativeVhdBoot

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 105KB - Virtual size: 126KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE