NEAS[.]b02dc3e5e98fb1850518ec21b937a090[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.b02dc3e5e98fb1850518ec21b937a090.exe
Size

119KB
MD5

b02dc3e5e98fb1850518ec21b937a090
SHA1

4b13512461772a49c0d0e4485e13047179a10392
SHA256

592adbf43440e2bd05b2bf47293b061f23116845fc8620983341a78a81e2c1e9
SHA512

b98fda56083082af6c349e65df8d6a6f92b0aab7a7dc3a15689edc394281df7281d7c76961ec08b230d3ec0c09814300d80b4b09780b7e665707278100d95467
SSDEEP

3072:dM+LtYH4iRcjLa/eFW8xpTmNi0on+33Vb7N9zFJPm:dbLOH4ymSB8pCAu3397N9z7m

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.b02dc3e5e98fb1850518ec21b937a090.exe

Files

NEAS.b02dc3e5e98fb1850518ec21b937a090.exe
.exe windows:4 windows x86

b692aacceb9c4e81112c64b5037f30df

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

WritePrivateProfileStructW
EnumCalendarInfoA
HeapLock
SetCriticalSectionSpinCount
SetFirmwareEnvironmentVariableExW
PssDuplicateSnapshot
CreateMutexA
LoadPackagedLibrary
WriteProfileSectionA
InterlockedIncrement

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 105KB - Virtual size: 126KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE