NEAS[.]37e67812410b1aeda214731fe36c9f10[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.37e67812410b1aeda214731fe36c9f10.exe
Size

119KB
MD5

37e67812410b1aeda214731fe36c9f10
SHA1

7d00309f9ef481d1ddb1947dc075aa13cfc00479
SHA256

01f0ac3a8afd5735fda4d537b1ea4679574f95250637cd2aef8fb72fedcb19aa
SHA512

1951b9207d64bcd5e9a1c81055087e8f4d30428dc539ee057257f8460de50ca9f013966f36ba4764fe1544ccddc22d3b3499464c5694e146e9df871a7d4df062
SSDEEP

3072:boeGcJXEfQdMoXRI5VQdh3Qw69lB8Ik402NE:bWcJX4QaoBQ+169lw402NE

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.37e67812410b1aeda214731fe36c9f10.exe

Files

NEAS.37e67812410b1aeda214731fe36c9f10.exe
.exe windows:4 windows x86

443d432cb9b70a44aeaa0b18d7d8183d

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetPackagesByPackageFamily
SleepConditionVariableCS
EnumSystemCodePagesA
Module32Next
SuspendThread
OpenFileMappingW
BuildCommDCBW
GetCommTimeouts
TerminateJobObject
GetUserDefaultLangID
UnregisterApplicationRestart

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 105KB - Virtual size: 126KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE