NEAS[.]2b0604e3b5ab29b602bf23ef3ee5a7a0[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.2b0604e3b5ab29b602bf23ef3ee5a7a0.exe
Size

44KB
MD5

2b0604e3b5ab29b602bf23ef3ee5a7a0
SHA1

6fbbf3f8305049567e09e4b7dcc73a801d2c7ada
SHA256

7169d69f1dc7ec502b54fa5b12234cba74c66717adb2579578f925a598ba2668
SHA512

73c79388cb98353a65c35e2b640840be6242afe0c6888a51151d7926bc84e12fffbb3067f79d1b81c716593f331775da4251cdfab7e8716a9fc5a647f60bf936
SSDEEP

768:tWhNd71q6Iwp2He75uVH/14p79U9cXKqQDM87DqvpvUqQR3uoHjx4YRm:tsd7NJ+KuVf1cLnQDMrxcqQxuMltRm

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.2b0604e3b5ab29b602bf23ef3ee5a7a0.exe

Files

NEAS.2b0604e3b5ab29b602bf23ef3ee5a7a0.exe
.exe windows:4 windows x86

f51f72115b338cd3df10642358690f31

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetModuleHandleA
GetProcAddress

user32

LoadIconA

gdi32

CreateBitmap

ole32

CoUninitialize

winscard

SCardForgetReaderW

ws2_32

select

Sections

.
Size: 18KB - Virtual size: 900KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE