NEAS[.]2c37469344cfe78bb501d27e8ec45f4a[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.2c37469344cfe78bb501d27e8ec45f4a.exe
Size

104KB
MD5

2c37469344cfe78bb501d27e8ec45f4a
SHA1

8882b079ac1d8ce88f7e7bf8db8405e3fc559b44
SHA256

1b0c0c4e1295ad8906b9aaf99b5d996228f88bd392ba4ea7e7b404b9fb0533a9
SHA512

0b47c1aa76831b22419f77af85a17594fc82d87b9944dbc4bde4954ff65fa21de6a4965fdcab3b7a992cfef2cbd87f4c9488c36b89e8db225c605b099cf4b6f0
SSDEEP

3072:7nxHLNUNanj1AkFxSPBZScREQZ6gxnQDZ8joET0F:zxR3pXFxMBZShZ9Oi

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.2c37469344cfe78bb501d27e8ec45f4a.exe

Files

NEAS.2c37469344cfe78bb501d27e8ec45f4a.exe
.exe windows:4 windows x86

a80a7f8f227d5d9e5c365e7def0b54a9

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CheckNameLegalDOS8Dot3A
CmdBatNotification
LZOpenFileW
OpenFile
GetProcessPriorityBoost
RegisterConsoleIME
LocalLock
ReleaseSemaphore
GetOEMCP
FindFirstFileW
IsDBCSLeadByteEx
GetPrivateProfileSectionNamesW

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE