NEAS[.]7d744d285ef6c0bbb5e5ea180048ed40[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.7d744d285ef6c0bbb5e5ea180048ed40.exe
Size

119KB
MD5

7d744d285ef6c0bbb5e5ea180048ed40
SHA1

ec21539e824959a830b187de312c815bde790948
SHA256

1ee680e714595ba4a58d117addacd14e347b2d5f769a99c0f9271886fc9f552c
SHA512

cb39b7bf5e3a7c9c8b1ead39896066e51f8b3a8dd70461add0a3712ce5966d1085c6e4a22993323e482223f5f086f1f689b69df0b97ac1eadee28c7d0dde8065
SSDEEP

3072:2QCxH7q4546+IVxfyiKRDH6pD3VF0wQSOgGjNgNIP6QW:JCxbq45vxQR2pxFH6RgDQW

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.7d744d285ef6c0bbb5e5ea180048ed40.exe

Files

NEAS.7d744d285ef6c0bbb5e5ea180048ed40.exe
.exe windows:4 windows x86

0b8bb65370599d1d135d9a1332221529

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SetThreadPriority
GetVolumePathNameW
ClosePackageInfo
TransactNamedPipe
GetCalendarInfoW
EnumCalendarInfoExW
lstrcpyA
GetDynamicTimeZoneInformation
GetDefaultCommConfigA
MapViewOfFileExNuma

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 105KB - Virtual size: 126KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE