NEAS[.]7f06c302cfd41f6668f566ff918dec10[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.7f06c302cfd41f6668f566ff918dec10.exe
Size

119KB
MD5

7f06c302cfd41f6668f566ff918dec10
SHA1

05c749b1148813f11d0edd09e887c05d7f28171d
SHA256

1e3358c54243eadbf4f1535de2d5fa9944312b38110622f4466b436973445d59
SHA512

a9442e3d91af5d050346a332659bdb37bd8cbc85963b9fb444b47344e16be61307952d5e4789255d624bc76fb9d21e9c527750d223c8bbd342b0b890bbf147f7
SSDEEP

1536:QBPx1fL9qU8DNG7abfrKgt4rxFfdpO7IaSxhNCKj7lqbeF44wfcpLd5br3HQxtP+:QFQU8DNG7aVt4T3jdqSu1yXXQnPPzK

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.7f06c302cfd41f6668f566ff918dec10.exe

Files

NEAS.7f06c302cfd41f6668f566ff918dec10.exe
.exe windows:4 windows x86

aba1c7b70ecdc30ec0b1577e38becdca

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

EnumSystemLanguageGroupsW
lstrcmpi
SetEnvironmentVariableW
IsValidLanguageGroup
GenerateConsoleCtrlEvent
GetProcessorSystemCycleTime
CreateDirectoryW
SetThreadPriority
GetNLSVersionEx
GetSystemAppDataKey

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 105KB - Virtual size: 126KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE