NEAS[.]002bbfc1cea62b33feba8d2ec01683a0[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.002bbfc1cea62b33feba8d2ec01683a0.exe
Size

126KB
MD5

002bbfc1cea62b33feba8d2ec01683a0
SHA1

2a77f532d05b684750a0a3b2c18308b1ac94b960
SHA256

75edba17a01a49e0de6793dc8312200f348689e5793deb4fc40f9d7c5405f8d4
SHA512

9ad76608304a5e8488a6a14464ac734bb1de7dc9bc92d14756769dbd648b0b60adfb394a9c4b30ae504d1dcd65c1c06a27740f26f98ab203f6bd9bf57111e164
SSDEEP

3072:DDZAL6EgWBgUHAqHeD+hYFreeye43klfLczbwOoyPH:CGE6UHJeD+hYFrebebFLo

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.002bbfc1cea62b33feba8d2ec01683a0.exe

Files

NEAS.002bbfc1cea62b33feba8d2ec01683a0.exe
.exe windows:4 windows x86

6ae7c36bf09b30917c36fac612dfa691

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

FileTimeToDosDateTime
CloseHandle
WritePrivateProfileSectionA

user32

GetCursorPos
DestroyCaret

Sections

.text
Size: 84KB - Virtual size: 84KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 241B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 38KB - Virtual size: 37KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: 512B - Virtual size: 503B

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.text
Size: - Virtual size: 204KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE