NEAS[.]0e54ac71df2d64aa51e536c3c8d72080[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.0e54ac71df2d64aa51e536c3c8d72080.exe
Size

21KB
MD5

0e54ac71df2d64aa51e536c3c8d72080
SHA1

a37fab391481730b658f6d9c4c9fa8f5a4f16920
SHA256

00d77705eb07edffc7aacdef130b91aeb8e9d4f8df96b1aedfde38272f6f7cee
SHA512

01e7b43d225b7f25e228190a55b7680544fb28b924c04c7dbe4acb6bbb6eb13d06c59679e85b16e1c146f3a1dcbb8103aef1fe5b4f76ebcd26d5e18a4bb92990
SSDEEP

192:3JfFQBTidO4veucxyln687JQCdiaR1JTbaNgYMujK7x0DnYe+PjP9k7Kh:5fF6idd54yl687JQGb5k1M/enYPL9L

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.0e54ac71df2d64aa51e536c3c8d72080.exe

Files

NEAS.0e54ac71df2d64aa51e536c3c8d72080.exe
.dll windows:4 windows x86

3c290133e6ebf9207ee785f8308f1159

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

lstrcmpiW
GlobalFree
lstrcpyW
lstrcpynW
GlobalAlloc

user32

wsprintfW

ole32

CoCreateInstance
CoTaskMemFree

Exports

Exports

ClearUserAssociations
QueryAppIsDefault
QueryAppIsDefaultAll
QueryCurrentDefault
SetAppAsDefault
SetAppAsDefaultAll

Sections

.text
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 584B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 256B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 206B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ