NEAS[.]eefa0358fddc998e5a37e0e8efda7720[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.eefa0358fddc998e5a37e0e8efda7720.exe
Size

119KB
MD5

eefa0358fddc998e5a37e0e8efda7720
SHA1

1d984a36c19efa29defef039f324383a0a547088
SHA256

51d3aa5740ef19650123db7f2be921f75e28a62265fb083f0969693a01af29ce
SHA512

f07df9b67e2e3a923676160e26deb4d56de7e49885d7e3a6d2be1224db4877544b2c15474ed2506f5ee3fb526ab2d878c8a29d27f37531aebaf87880d86f0b04
SSDEEP

3072:UOSEAJi/KNNk0aV/u5Mn4cnj9URtVY2sGfjgH0xNyFecvP:Uz9BNNk0aV/0Q4cnxAVQGfjgHicFX

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.eefa0358fddc998e5a37e0e8efda7720.exe

Files

NEAS.eefa0358fddc998e5a37e0e8efda7720.exe
.exe windows:4 windows x86

47cb8218ce05620e0036190e4b9ff1ff

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

EnumSystemLanguageGroupsW
BindIoCompletionCallback
OpenProcessToken
GetSystemWindowsDirectoryA
SetCriticalSectionSpinCount
FindFirstFileW
SetFileShortNameW
SearchPathA
SetDynamicTimeZoneInformation

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 105KB - Virtual size: 126KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE