NEAS[.]7e3008f54ca82bbceea5e5bcecfeb1c0[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.7e3008f54ca82bbceea5e5bcecfeb1c0.exe
Size

119KB
MD5

7e3008f54ca82bbceea5e5bcecfeb1c0
SHA1

d3e30167248072013d39a5204d943a91381197a8
SHA256

2b1d66b6f5091afcd0bd2a50bd70a14bacfb1f13fdd82872c4335287425c2086
SHA512

9ac6159c1ca35b1a1fe6eb4b615af96d4621b933ead4acbd55ea08ffc9927a8c3383fee7dd4773f5a2af9ffd076d75fdda080fad3794fcbeb1f4cf98f760d3de
SSDEEP

3072:z4VE9ew87rIlfcJ9yE4lY6pL8iI/RYkMHqZXS2CFw03:6YSv4yAL83/RYTH2dC73

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.7e3008f54ca82bbceea5e5bcecfeb1c0.exe

Files

NEAS.7e3008f54ca82bbceea5e5bcecfeb1c0.exe
.exe windows:4 windows x86

01d74778f3fe994dbf8bec44f40572c8

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetDurationFormatEx
GetTempPathW
WerRegisterFile
LeaveCriticalSectionWhenCallbackReturns
SetThreadUILanguage
lstrcatW
LoadLibraryExW
PackageFullNameFromId
GetStringTypeExW
DeleteSynchronizationBarrier

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 105KB - Virtual size: 126KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE