NEAS[.]2a5a0c5ae69922abddb695a0783319c0[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.2a5a0c5ae69922abddb695a0783319c0.exe
Size

119KB
MD5

2a5a0c5ae69922abddb695a0783319c0
SHA1

7343f31339a0c4469497fa33e80c2c42ea52013c
SHA256

77145349fe5003b5cda137573d5e466e71bba19422aec6f15543bf62499472a9
SHA512

f40dc7e6fbf7d5d68ee200f2431adda21c019de11dfcd60b65f8bcc94ab3e984ed003561bf34edc6f99aaccd21aef54668d4c8375b876bcb890ad752787be3b9
SSDEEP

3072:4mN+mnGlPS2ObFHtqw/sXSIMVHTeF0yHGI:5iPAbKK1C

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.2a5a0c5ae69922abddb695a0783319c0.exe

Files

NEAS.2a5a0c5ae69922abddb695a0783319c0.exe
.exe windows:4 windows x86 arch:x86

e98bca634e569a47d9b10051c0f8cb65

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GlobalFree
CompareStringOrdinal
GlobalCompact
ExpungeConsoleCommandHistoryA
SetConsoleDisplayMode
GetLongPathNameTransactedA
GetFullPathNameA
DelayLoadFailureHook
DiscardVirtualMemory
lstrcmpW

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 105KB - Virtual size: 126KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE