NEAS[.]c44355753f02395598c82fdcc1d20f80[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.c44355753f02395598c82fdcc1d20f80.exe
Size

119KB
MD5

c44355753f02395598c82fdcc1d20f80
SHA1

03b79d96177a7be9578597c16e92f54454fa87bc
SHA256

665a745c2a6d7edd0f7a8078a92421a807d48043ef9a558640f79aac64a85a1b
SHA512

4f30541cc4d1919c1faf2144a69659345608dccb3d8ad1cdee35d6a04e302a948c94c1770b7bfc0671acabe726c23614aa8e8b01c578878211c842c327bed0ef
SSDEEP

3072:0gGLZ5KdXZzf4cDPK9Ns05JoSZlaT7PmQ2HZOqrYPScdKCHe:rGSdJT57OR/ZQ/PmosC+

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.c44355753f02395598c82fdcc1d20f80.exe

Files

NEAS.c44355753f02395598c82fdcc1d20f80.exe
.exe windows:4 windows x86

92415825faba97c983d9b403506e2bb0

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetVolumeInformationW
EnumResourceNamesExW
SetConsoleScreenBufferInfoEx
GlobalFree
CreateFileTransactedA
WriteFileEx
GetProfileSectionW
WritePrivateProfileStructA
RegDisablePredefinedCacheEx
RegOpenKeyExW

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 105KB - Virtual size: 126KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE