NEAS[.]ef62e4e4052f210003ba121dbdb8a750[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.ef62e4e4052f210003ba121dbdb8a750.exe
Size

134KB
MD5

ef62e4e4052f210003ba121dbdb8a750
SHA1

ab24c990e8bce1cc2fa3d4f6d2fa8b5103951ab5
SHA256

9027d81b2898f11b82eda35d0665cdf02e97adef3e0a223a8c1eab1515388cea
SHA512

930afd978fb70a0d9e899c56e7a51c1e3c2d5e53aaaa37929f862ec5b07efb1037446931d0e3435fdfc377172871837c2a4f26ede025fc4436ac43c649eef0c8
SSDEEP

3072:DMMLP553SlJqpx5QvCFxXjzCfI79yipWVpNGSaY/YIZ2JJBeqYF:DMML3Sl0pFxvuI7gpNGSaY/YIZ2L8qw

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.ef62e4e4052f210003ba121dbdb8a750.exe

Files

NEAS.ef62e4e4052f210003ba121dbdb8a750.exe
.exe windows:4 windows x86

331f575bfeb4fbb56d21dd0b4abbc806

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

advapi32

GetEventLogInformation

msvcrt

strerror_s

Sections

5'Zo&
Size: 60KB - Virtual size: 59KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 66KB - Virtual size: 66KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

DATA
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

nny708
Size: 512B - Virtual size: 64B

.l1
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.l1
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE