NEAS[.]2cabc8b16a52d51b365a5772752ae2d0[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.2cabc8b16a52d51b365a5772752ae2d0.exe
Size

119KB
MD5

2cabc8b16a52d51b365a5772752ae2d0
SHA1

77193a99251cf977d357c1514cd03d1a1a14cd0d
SHA256

f4987fe23eb8131b6659a8b0f653d806b4ae8d098e3af5b86410a57d89213a80
SHA512

5a6d9e4a41060a4fc3b31939891790ce5d3e7ccaf93ca61316e3f51f8ece4dbc532a969202928e6b84b429d861d452479e88696196d9b70b081645dabd5641e1
SSDEEP

3072:vZ0zng5fJelzRO/AR6DgruP/C80KQTBDbncopVRg8:xAw0E/ARmhSpT5Bn

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.2cabc8b16a52d51b365a5772752ae2d0.exe

Files

NEAS.2cabc8b16a52d51b365a5772752ae2d0.exe
.exe windows:4 windows x86

e7f87cdd431a1333e45d1d64cbe3e635

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

lstrcmp
RegisterWowBaseHandlers
SetCommBreak
EnumCalendarInfoW
Wow64DisableWow64FsRedirection
EnableThreadProfiling
ShowConsoleCursor
ExpandEnvironmentStringsA
GetLocaleInfoA
FindActCtxSectionGuidWorker

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 105KB - Virtual size: 126KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE