NEAS[.]1f4f57c69d0348d68075927d2877f6b0[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.1f4f57c69d0348d68075927d2877f6b0.exe
Size

119KB
MD5

1f4f57c69d0348d68075927d2877f6b0
SHA1

942be6003928429495cd11cc83a8b2a3e8c14a7a
SHA256

e01a36bf2f72ab88a747931887c7625cad1f7997ea765e947a820d0baa539968
SHA512

44909725157dc9d1845a1349c6677a8b7d366bc2656082c0d1e2d5f8ef0de27935dc15ef68b23567642518c17b9251050448dace402eb0219ec6d20fdebe1b92
SSDEEP

3072:zOL7YUxAIar5WYDbbpFScn3g3wTHAnN/tpYK:zOZxor5Wyp3SwTs/tpn

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.1f4f57c69d0348d68075927d2877f6b0.exe

Files

NEAS.1f4f57c69d0348d68075927d2877f6b0.exe
.exe windows:4 windows x86

7a84a52af781f899170acee5fe320dbb

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetTapePosition
_lclose
GetFullPathNameA
GetVolumePathNamesForVolumeNameA
GetThreadIdealProcessorEx
WritePrivateProfileStructA
GetComputerNameA
EnumCalendarInfoExA
PssFreeSnapshot
GetCalendarInfoA

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 105KB - Virtual size: 126KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE