NEAS[.]ec0188743a584160151e8fde07c0b5a0[.]exe | Triage

Sharing

General

Target

NEAS.ec0188743a584160151e8fde07c0b5a0.exe
Size

119KB
MD5

ec0188743a584160151e8fde07c0b5a0
SHA1

a4b6b9379ccd7be684a68d7c7b0a84333e20f4e8
SHA256

f398f5ec1724908e3e1cacc0a4091c98d54f899c3528cbfcb52a2dde8c0e4d83
SHA512

15a0271003f18e2af79ed75d62f14cb053283a870e5f7b754ccc0b7f29ac33ec199e9adedb863fa63e87dda0767dd7a5428f842a76f0d5d689158d004b69181a
SSDEEP

3072:sfbSS8jXDII3qIAq5TDXndv6hEB4xVCZKFwYXV7Jq:s0XUI6IAMTLFA4DZBYlI

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.ec0188743a584160151e8fde07c0b5a0.exe

Files

NEAS.ec0188743a584160151e8fde07c0b5a0.exe
.exe windows:4 windows x86

cbcba6bdda0fcf96755bf28b15c32a41

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetTickCount
FoldStringW
OpenFileMappingA
GetLogicalDriveStringsA
OfferVirtualMemory
GetNLSVersionEx
SetErrorMode
GetTimeZoneInformationForYear
LCIDToLocaleName
SetFileApisToANSI
RtlUnwind

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 105KB - Virtual size: 126KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE