NEAS[.]7eb0a07971d2a7d71676f3536ea5f770[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.7eb0a07971d2a7d71676f3536ea5f770.exe
Size

119KB
MD5

7eb0a07971d2a7d71676f3536ea5f770
SHA1

ba04e01bb9a7817f141c89502976a6fc868c7541
SHA256

34d479004f216bf18cf60412bae0268009a0b59afa1f8bd010c93906af94d3ab
SHA512

6b993229a7f4dd0e4a545925829720fb3744c6012bf6a800ac4fbf9b33fde159f57382f1d83c89f3d8d7f4706964de916ebc9fa580be32cf0b010e337f26dedf
SSDEEP

3072:t0Y7ckXLMH/9FsF9LYa7hi655+LtTDdZ4/D8IVU6XpshTgaB:t0Yo6o/9+3PhRnAF4r1LXpshT3B

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.7eb0a07971d2a7d71676f3536ea5f770.exe

Files

NEAS.7eb0a07971d2a7d71676f3536ea5f770.exe
.exe windows:4 windows x86

f437f50af240453dbc5d6f6df8466203

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetConsoleCursorMode
SetSearchPathMode
MapViewOfFileFromApp
ReadThreadProfilingData
WriteTapemark
GetThreadErrorMode
GetCurrentPackageInfo
WerRegisterRuntimeExceptionModuleWorker
FindStringOrdinal

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 105KB - Virtual size: 126KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE