NEAS[.]ed75387f77ca6123afdf731a28bb6740[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.ed75387f77ca6123afdf731a28bb6740.exe
Size

119KB
MD5

ed75387f77ca6123afdf731a28bb6740
SHA1

819a53218e5a133ff023c278de0ece04370cda99
SHA256

0a274f34988d198864976bdec502ef069d5df2197efdf4346bc6c04675b57634
SHA512

78be089a12d9abb7a5590ab13b6b9372b16cbbbddc874036e4916d802c1c9605f7a4c1bdf59704437870d77addbc1d5b07b26436d48080d4d8491c1f840e90a1
SSDEEP

3072:F9TRct+yZ58rXOZhon8vzV0iDOcYY6eHSK/:FBi+o8kV0PrYj/

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.ed75387f77ca6123afdf731a28bb6740.exe

Files

NEAS.ed75387f77ca6123afdf731a28bb6740.exe
.exe windows:4 windows x86

8fc6c0ea54cca7397c5a279326f9842d

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetThreadErrorMode
VirtualQuery
WritePrivateProfileStructW
UnregisterWaitEx
IsValidCodePage
WerUnregisterCustomMetadata
GetCurrentPackageFullName
CreateFileW
GetConsoleKeyboardLayoutNameA
GetFileSize

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 105KB - Virtual size: 126KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE