NEAS[.]7f37ed14ee885396fc0d74cb42daa5e0[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.7f37ed14ee885396fc0d74cb42daa5e0.exe
Size

119KB
MD5

7f37ed14ee885396fc0d74cb42daa5e0
SHA1

6a91f3a39759a77fad6c951ca47ca2784f616608
SHA256

c40ebadbbc024e7962be7a46c7073cb96f8a17a9dec99874c20a1fc04628b0aa
SHA512

bf2a703542d7cdd53781bd0f9a1f3118829ed4161a5e655a4d904400b4d8c12af1f7b95b65cfda94366aac0facd69f0cc52fffc86b52751c4c1776beb7ac3c62
SSDEEP

3072:mm6dHd9pMi9xnQRLBTOwy520Mj6Tx9YdKgo2p2:mms35xnQLBLVj6TxWdw

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.7f37ed14ee885396fc0d74cb42daa5e0.exe

Files

NEAS.7f37ed14ee885396fc0d74cb42daa5e0.exe
.exe windows:4 windows x86

f64c64cda730356d5fd694b99a3e2f2d

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetACP
_lopen
CreateFiber
GetSystemTimeAsFileTime
WaitNamedPipeW
RestoreLastError
CreateFileMappingFromApp
Process32First
SetFileTime
TermsrvGetWindowsDirectoryA
BaseCheckAppcompatCacheExWorker

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 105KB - Virtual size: 126KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE