NEAS[.]00ee771a8bfd154308fddcb60392ec70[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.00ee771a8bfd154308fddcb60392ec70.exe
Size

96KB
MD5

00ee771a8bfd154308fddcb60392ec70
SHA1

380fd5f2791eb21ed147f0b2fa1a5e4a09843e53
SHA256

24a10d6fe1fe2c03f955fadaa09f40b6d5c9e27d1c6ab71f5e106813cf57d376
SHA512

389272f2436389adaef0b3955f02679e0edcd94c5d373628faf5ffd530d769a36782f15998306eb4e91178d8210acd6b79b113c7c70a7ee2099f811325caf109
SSDEEP

768:N+ObqnAzmp9vqfeQ5Tdg9t7QzSvOqMd7RKveS+sLcGJbCLb3rx8spUVYmfOV:N+ObqnamTvqf/AlvOqMdovF4GxzspOy

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.00ee771a8bfd154308fddcb60392ec70.exe

Files

NEAS.00ee771a8bfd154308fddcb60392ec70.exe
.exe windows:4 windows x86

0aad496f7065898d655c1e5a0cfd537f

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetTickCount
GetLastError
DeleteFileW
Sleep
VirtualFree
CloseHandle
GetModuleHandleA
WriteFile
GetThreadPriority
GetProcAddress
VirtualAlloc
RtlUnwind
LoadLibraryA
GetCurrentProcess
TerminateProcess
HeapReAlloc
HeapFree
ExitProcess
HeapAlloc
QueryPerformanceCounter
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
GetModuleFileNameA

user32

EnableWindow
LoadBitmapA
SetFocus
DestroyWindow
SendMessageA

ws2_32

send
select

Exports

Exports

?XM2LPARSE@@YAKK@Z

Sections

.text
Size: 8KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 68KB - Virtual size: 67KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.const3
Size: 4KB - Virtual size: 46B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 12KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ