NEAS[.]e87a3f7febfdff2dfe5e978a09806450[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.e87a3f7febfdff2dfe5e978a09806450.exe
Size

119KB
MD5

e87a3f7febfdff2dfe5e978a09806450
SHA1

2bb051a2f0ffef34fc5366229289706ecd2deea6
SHA256

5c74466cf7f3882486b7bc933eff7bf966496dc8b30203b334f0b2f046107814
SHA512

60c81015875aaaa49c3fc0eeda234eeec96d250d8cda2ec76cc148670546d4795ae526f089f475dbce84ac63b6e03e2c3346412fea80e0900e76b5f9ed975837
SSDEEP

3072:ur7HaMbuRuej+jrE54OllHTQFDlDnlLZ0sbePx8vVXxz5xJ4GTS:0HHbbFo5Vl1sJ5q78VXxzXJ4Gu

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.e87a3f7febfdff2dfe5e978a09806450.exe

Files

NEAS.e87a3f7febfdff2dfe5e978a09806450.exe
.exe windows:4 windows x86

700ef46f1e2f57f3bd355cbc5d633269

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

UTRegister
lstrcpyn
CreateSemaphoreW
LocalFree
BasepMapModuleHandle
GetUserDefaultGeoName
GetNextVDMCommand
GlobalHandle
ScrollConsoleScreenBufferW
SetConsolePalette
CreateSymbolicLinkTransactedA

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 105KB - Virtual size: 126KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE