NEAS[.]edc4972285cbd0f414df4bae80d5af70[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.edc4972285cbd0f414df4bae80d5af70.exe
Size

119KB
MD5

edc4972285cbd0f414df4bae80d5af70
SHA1

13322c5640f30014ebd358100f0ea295b280c4d8
SHA256

169a1abb76951f1553a1f712d6aa1197a57e116a60fd73d04bf173b86032fa63
SHA512

ae70f4d943b4d21132eff95227a8897dba290b7e22c6d847de23b59524b27f246bde2fdf0013347791281c7ea5d141e77763450494c6115b424d542b00d7987c
SSDEEP

3072:1uZOwMJsI0FOjzIw+kW5EbSEqaCC+faMn/WR:IbM18OjzQp4T8n+R

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.edc4972285cbd0f414df4bae80d5af70.exe

Files

NEAS.edc4972285cbd0f414df4bae80d5af70.exe
.exe windows:4 windows x86

b9fa54a7c714d23c2b85dcdc5c01b2e4

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcessDefaultCpuSets
TermsrvDeleteValue
FindNLSString
BaseDllReadWriteIniFile
NlsUpdateSystemLocale
VirtualAlloc
GetConsoleCursorInfo
GetStringTypeA
FindResourceExA
UpdateProcThreadAttribute

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 105KB - Virtual size: 126KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE