NEAS[.]e67203cc1e43f8c31d3f0399c2792990[.]exe | Triage

Sharing

General

Target

NEAS.e67203cc1e43f8c31d3f0399c2792990.exe
Size

119KB
MD5

e67203cc1e43f8c31d3f0399c2792990
SHA1

605dedc4e8181454de6cfb876651bc964d4f138e
SHA256

9da7a6a9cc56910ae7bafa91e5be0cbe9719911e89dee3fb29e66fed8e4ce6ff
SHA512

e6ec6b6d4f266050a5604cac2f985566db5f850530fe69a19fe959df39de60a2fd1f4fa7bace069caa78c5e3f66965cedbbab7d9e7585b909f16b6ed0b6f4bc2
SSDEEP

3072:oVJs1GbKCu9PUMstFPoGL3rPHflqP3Nt0US5A4etUPo5gq:oVJs1GmmT4om4fw2q

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.e67203cc1e43f8c31d3f0399c2792990.exe

Files

NEAS.e67203cc1e43f8c31d3f0399c2792990.exe
.exe windows:4 windows x86

786f8fa1ea4761e2cd3e5ecf743680a5

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SetDefaultCommConfigA
FindFirstChangeNotificationA
SetConsoleOutputCP
VirtualUnlock
GetEraNameCountedString
SetStdHandle
GetFileMUIPath
GetTempFileNameA
HeapReAlloc
SetComputerNameEx2W
PostQueuedCompletionStatus

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 105KB - Virtual size: 126KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE