NEAS[.]ec9e9d94c0ad052297fef71052371060[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.ec9e9d94c0ad052297fef71052371060.exe
Size

119KB
MD5

ec9e9d94c0ad052297fef71052371060
SHA1

974ed7e2d2721953b603aa1dd0cecded2ef39bb6
SHA256

16d7dcfbeed4f9b99fdb8e6aa0761d0a064f6feba9a1372009ad28609f9529e0
SHA512

eb567829c65e76d03631db7989539c77cee3a0821ede5511bda4f95ca0227e4426784e33415677756b776c45de1b19f5cd2f286270de781e53cd91c5274beeb7
SSDEEP

1536:cH+kYk5IUQMRQKuOQFbB4CKpwUQ2UcFe8WuwDJ22qmM9iCedQXfJ7jAt7VwaaCWv:cH+fQhr3cbGPVQ2Vx1zECWQXfg4ZU2

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.ec9e9d94c0ad052297fef71052371060.exe

Files

NEAS.ec9e9d94c0ad052297fef71052371060.exe
.exe windows:4 windows x86

585cfc45af8a544975fc8c13bded8679

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

_llseek
GetThreadInformation
WriteConsoleInputW
DebugActiveProcess
SetLocalPrimaryComputerNameA
WerUnregisterAdditionalProcess
GetEnvironmentStrings
CompareFileTime
RaiseException
InterlockedCompareExchange

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 105KB - Virtual size: 126KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE