NEAS[.]e02b5e8096f15d6c45b312cb19c8f3d0[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.e02b5e8096f15d6c45b312cb19c8f3d0.exe
Size

119KB
MD5

e02b5e8096f15d6c45b312cb19c8f3d0
SHA1

aff001c890358ba72660c921ed77e46d452eada3
SHA256

0e192f8c3f67c7c59764c329d90b725be5b38a82aaa1811f059e4806f7dc6a4a
SHA512

262d3cb64d10c7af2e21f846f52bf8ef1a69382fb1f089a6519aeb96e1db2b7d8e43f0e48454ea882b63b6283fcc1e5d3d59108da61948ff6c41abb7bd695903
SSDEEP

3072:PeyMNsLRTcEdg+PMXtyjkxUSmudqmvOBC:XQ0PVPMXwdudLOBC

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.e02b5e8096f15d6c45b312cb19c8f3d0.exe

Files

NEAS.e02b5e8096f15d6c45b312cb19c8f3d0.exe
.exe windows:4 windows x86

754dbce9920f3e120c286ac46d4be143

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SetDefaultDllDirectories
TerminateProcess
IsNLSDefinedString
WaitForThreadpoolTimerCallbacks
GetVolumePathNameW
FindVolumeClose
WaitForMultipleObjectsEx
IsWow64Process2
GetNamedPipeClientProcessId

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 105KB - Virtual size: 126KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE