NEAS[.]7725f1da39ceb7f1b5a3bd82dde45ec0[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.7725f1da39ceb7f1b5a3bd82dde45ec0.exe
Size

119KB
MD5

7725f1da39ceb7f1b5a3bd82dde45ec0
SHA1

acb5809d43eb4cdcbece4947209b15dc604c8604
SHA256

c583017028258ece848fbb8eaf821d45a3e230309698f04adba27fcac77090d6
SHA512

0f4a0b84ae0cf1b49b492113c84dbabbc27e3958a7b8473f32e30ec16828460f3b9898293b24f21b8eaf7c60c6da8a5b1b5b2f9bc07157406efced9ea2dea972
SSDEEP

3072:/vCB6Qzs9QgRCdyLLLjZj/95cAJG447H4KTL0ihPU:O6QzsKgRCdyLLLN/9zJG4+YKUMPU

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.7725f1da39ceb7f1b5a3bd82dde45ec0.exe

Files

NEAS.7725f1da39ceb7f1b5a3bd82dde45ec0.exe
.exe windows:4 windows x86

9cd3543976011039b4524eefb5b54afd

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleHandleExA
FindFirstFileTransactedW
SetThreadPriorityBoost
LoadStringBaseW
SetConsoleInputExeNameA
ReleaseSRWLockShared
GetConsoleCommandHistoryLengthW
FindFirstVolumeMountPointA
FindFirstStreamW

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 105KB - Virtual size: 126KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE