NEAS[.]02bd065085299108f8c70c8e7f53c9b0[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.02bd065085299108f8c70c8e7f53c9b0.exe
Size

119KB
MD5

02bd065085299108f8c70c8e7f53c9b0
SHA1

22fa1aa667bc4d88f659a6f1e2df9d58abb73a84
SHA256

2319e5b28243760d81a0ff9ec19609223e8d751a97b39493e55401e67e36c03b
SHA512

6d8ab1dcd93e94f9e4377cbbd4386c6e16fb7fb2431856210b2cf52540a2a5c16b165c8fbb3111cd1501d62e80fe3eee7e42a118beafe272c8ed9dea584297f7
SSDEEP

3072:j8YZbwkzVNtRA6QJ5dKhCvd4Uql90mRyZ49QZPt/:jzwkzftQbshGd4U0RyBt/

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.02bd065085299108f8c70c8e7f53c9b0.exe

Files

NEAS.02bd065085299108f8c70c8e7f53c9b0.exe
.exe windows:4 windows x86

df95f1c6ce64329037d571199716c095

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SetCalendarInfoW
SetThreadContext
FoldStringA
SetErrorMode
GetProcAddress
QueryIoRateControlInformationJobObject
FreeLibraryWhenCallbackReturns
_lopen
GetCurrentApplicationUserModelId
SetConsoleDisplayMode

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 105KB - Virtual size: 126KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE