NEAS[.]7bf08810af61efef30ed5afd7e39eee0[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.7bf08810af61efef30ed5afd7e39eee0.exe
Size

119KB
MD5

7bf08810af61efef30ed5afd7e39eee0
SHA1

74b333699c4cd99f37ed631db77cc2ef9b295b57
SHA256

0ada1750523c6c35a5b5f995a1ae740d8e0aa75e4b3064f0f8d64983d435f770
SHA512

eb90063f5fa109c175798bce7d1c23d1aba489e3279240c8f4c0c6f589f70c0fc92cd6a27d54f33aa87ba5e5ea26e8504c3f4a3799b209bcfd0b446400206647
SSDEEP

3072:mP+HlIg5QoMNKsKrxZze0nab+NPsGztEukGBp:mPOXMcnDq0ab+tEukGBp

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.7bf08810af61efef30ed5afd7e39eee0.exe

Files

NEAS.7bf08810af61efef30ed5afd7e39eee0.exe
.exe windows:4 windows x86

8b77d06ed6cb2a9e627c468f2338f3ac

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LZDone
GetDriveTypeA
CopyFileA
DisconnectNamedPipe
GetCurrentThreadStackLimits
SetFilePointer
GetSystemRegistryQuota
CreateWaitableTimerExW
BaseFormatTimeOut
Thread32Next
RegisterWaitForSingleObject

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 105KB - Virtual size: 126KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE