NEAS[.]ee042b66c3b0d0434350833e3ea1d2d0[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.ee042b66c3b0d0434350833e3ea1d2d0.exe
Size

119KB
MD5

ee042b66c3b0d0434350833e3ea1d2d0
SHA1

612a0c3e4a2c718b93d946a42db0b6d0738e1b23
SHA256

da8243849e078ebd0c424967375ffb8484a6cde9f5e51e5c938aea16693eff4f
SHA512

2aa32447a198cf863d19ebd20d9c3a2ffb91de7e58690e98c6c3ebadf76509fa3b0d276341ee57b2810ee3c6289f6999f6071ad5dd65b3575f4803b450bd8bf0
SSDEEP

3072:3MQ1MSDDx8uYA8ZwkIPhrJab6kcO8yJ5/nW70:VDdPYvwkIptW98Qk0

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.ee042b66c3b0d0434350833e3ea1d2d0.exe

Files

NEAS.ee042b66c3b0d0434350833e3ea1d2d0.exe
.exe windows:4 windows x86 arch:x86

049c625b2ccac49395c414d761e106b9

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

BaseFlushAppcompatCache
GetNamedPipeHandleStateW
InitializeContext
GlobalGetAtomNameA
IsBadWritePtr
FormatApplicationUserModelId
DeleteBoundaryDescriptor
GetDiskFreeSpaceExA
lstrlenA
GetCurrentApplicationUserModelId

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 105KB - Virtual size: 126KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE