NEAS[.]772c2a3a965600fa2c070efc5c30b7d0[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.772c2a3a965600fa2c070efc5c30b7d0.exe
Size

119KB
MD5

772c2a3a965600fa2c070efc5c30b7d0
SHA1

e0b69b8e39b49074f0654730962dbefec1b1f134
SHA256

e5decf5c402b34b59abc270892b833b124fb885af0b3f1b02767560b92f4e168
SHA512

a0e916a91355e7acc8f05b132089b1f0c26bbd2e2156ca3473456d4da8e3b491e6fd5bfd93478bef1916e03ce2447c57795fa54381358aab2eb29de3313e8266
SSDEEP

3072:ET0CpZZb86VI5PyV3xqrcLImVWDk+Bxg3H6lbXF/M0Z:ETjb86sGIwLtVW1g36lbXF//

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.772c2a3a965600fa2c070efc5c30b7d0.exe

Files

NEAS.772c2a3a965600fa2c070efc5c30b7d0.exe
.exe windows:4 windows x86

6c2ee5c6d1cb5abb64716f7bf9a6c9bd

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

FindActCtxSectionStringW
LZRead
CreateHardLinkA
BasepFreeAppCompatData
CreateEventW
DisableThreadProfiling
GetProcessDEPPolicy
GetPrivateProfileStringA
SetEventWhenCallbackReturns
ExitVDM
LZRead

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 105KB - Virtual size: 126KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE