NEAS[.]ee9566c3810f281f72c3682db05120a0[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.ee9566c3810f281f72c3682db05120a0.exe
Size

119KB
MD5

ee9566c3810f281f72c3682db05120a0
SHA1

e049109d0e2ed169acf899ff7f8c6681fd4521b1
SHA256

7a43219d1e7664e69850c5a744edd7ff0197980da60bc21f8294cec33c19dc0f
SHA512

0accf62a2605962f561ab099da52113075825306bda6a0205784a4d029aae89df707d3054eb72ac8f38c3702da6a06e2f66c81b299a5338edee8c211f4f5f223
SSDEEP

1536:++iA8norsPxxA/HTmZ7ZSf533+BOO0ho0pcO4Ausjszdt0S2wlfihSg7jORA9yxL:+bAujxxA/CBZapwI6tV2wl6zPxsv3DB

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.ee9566c3810f281f72c3682db05120a0.exe

Files

NEAS.ee9566c3810f281f72c3682db05120a0.exe
.exe windows:4 windows x86

4a23ef1c27eea3f0d434fb873b78de6f

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

WerUnregisterRuntimeExceptionModuleWorker
BackupRead
SetIoRateControlInformationJobObject
RegEnumValueW
SetLocaleInfoW
BasepAppContainerEnvironmentExtension
CancelSynchronousIo
CheckForReadOnlyResourceFilter

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 105KB - Virtual size: 126KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE