NEAS[.]07bcc101392a3a5a2e2ef79c72442e10[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.07bcc101392a3a5a2e2ef79c72442e10.exe
Size

62KB
MD5

07bcc101392a3a5a2e2ef79c72442e10
SHA1

1c7de2fc686705499adb8f4ae20c1442ad9f3e4d
SHA256

ab1085b93c7389192999d4d3ff7a10dbb57abf56aaf2f0e93bf546cc204637ac
SHA512

eb4bd8fe20026c7d63deb7ab462f6ca510e027a8705c822ed3f8798f585d31e0ace0cd5cd08178fa1a994f21c10cf3cdc1ad68d9f56736ffe7a52e436521893b
SSDEEP

1536:bzhFbyClDYDnzGmaRhedpCwFcD35c6Z39zKhV5QODbT:b/DY3ra/eTCjK6bqVzDbT

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.07bcc101392a3a5a2e2ef79c72442e10.exe

Files

NEAS.07bcc101392a3a5a2e2ef79c72442e10.exe
.exe windows:4 windows x86

c9d5cd028ec0d64f2e798e6e82908cf6

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetThreadContext
WritePrivateProfileStringA
GetCPInfo
ExpungeConsoleCommandHistoryW
FindNextChangeNotification
OpenWaitableTimerW
CreatePipe
UnregisterWaitEx
FindNextVolumeW
EnumSystemLanguageGroupsW

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 47KB - Virtual size: 66KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE