NEAS[.]c7534047309400145aabd7f48d2c6ac0[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.c7534047309400145aabd7f48d2c6ac0.exe
Size

119KB
MD5

c7534047309400145aabd7f48d2c6ac0
SHA1

9d13eb54c5b7aa5a1bb081a668f5b029676a8bd9
SHA256

f1faec4da8e0b81b02b3a67e41ea5cd3aee6746fda39d6e534f95114ccf95288
SHA512

0bd579442aac6cfd8a57ecc9d911e5f6c556cdbea448ed2c77bcc7cc07632b60a78429c11a01a4ff35723b45518daac8333e226ad084d54a805e2c298ca54059
SSDEEP

3072:3A5ksdHjaTpZAfUw0NVQC6JBhB7+BXG0C1ty:eksHu9ZeUwiVQCen+BfCy

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.c7534047309400145aabd7f48d2c6ac0.exe

Files

NEAS.c7534047309400145aabd7f48d2c6ac0.exe
.exe windows:4 windows x86

9306d1c12b1a7964271d6c02b884253b

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GlobalHandle
SetProcessDefaultCpuSets
RegGetKeySecurity
FindResourceExA
BaseUpdateAppcompatCacheWorker
QuirkGetData2Worker
SetProcessInformation
UnregisterConsoleIME
GetTimeZoneInformation
QueryPerformanceCounter

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 105KB - Virtual size: 126KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE