NEAS[.]2630f4833808c8f2c2e44f615be2d220[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.2630f4833808c8f2c2e44f615be2d220.exe
Size

119KB
MD5

2630f4833808c8f2c2e44f615be2d220
SHA1

75d92a63bec985b75226a6855f529e4be812c0ad
SHA256

98a8aff9a9d50003c3df91eac1cb66af8efa02c21217ac2633a8f2c30a190965
SHA512

2881e070491edf6797ac9b9973770761b1e88ecd01144720eb4155f89731e455cea6acfe25a48f8f269693c77033bd91689ba58f8b1bd929295b7c0aa4275dd5
SSDEEP

1536:H1imFW7lHHzXVgR89yEJ3q3CsNbCmUGDwypjVrs2ryrd1vUQuqSSqK5tnCvv:H1D057Vc8nJaLuOcyHs2qxnC

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.2630f4833808c8f2c2e44f615be2d220.exe

Files

NEAS.2630f4833808c8f2c2e44f615be2d220.exe
.exe windows:4 windows x86

e20a3f3c8f800126b515b8fd2025a576

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetDiskFreeSpaceExW
CreateProcessInternalWSecure
SetConsoleHardwareState
GetModuleHandleExA
SetFileShortNameW
WriteProfileStringA
Heap32Next
CompareStringW
GetFileAttributesW
GetThreadSelectorEntry

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.brdata
Size: 63KB - Virtual size: 84KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE