NEAS[.]eebf417c54cd315aa9841b34d651be90[.]exe | Triage

Sharing

General

Target

NEAS.eebf417c54cd315aa9841b34d651be90.exe
Size

119KB
MD5

eebf417c54cd315aa9841b34d651be90
SHA1

d8b25ef31b9510a33d72ed37ccb4cc20ddc874c6
SHA256

3ed08fec60d328521afbb1259dc992bb0964d64cd8ac4cae3157c71894bf49b7
SHA512

e777994fac3a86b1841d890abf9a94379c3bc113bd13faf857516ae3d525420c382e9c1fe42e3ef8d08b3c19fa2260b09b9d4725ef6e08a310704fba5f98ab8b
SSDEEP

1536:Lj6hF4pg5QAURxen+1+eK9uLfUDkapw4ITs9eVHHrPb4K9kE3B07PnMDtXDbohGg:LvpzdRMgNK9u7lMiHAKqY9DbeFh

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.eebf417c54cd315aa9841b34d651be90.exe

Files

NEAS.eebf417c54cd315aa9841b34d651be90.exe
.exe windows:4 windows x86 arch:x86

d2b0ca2f4955e3356fe0448b1b43572a

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SetLastError
OOBEComplete
QueryThreadProfiling
DeleteTimerQueueTimer
IsBadReadPtr
FindNLSString
Module32FirstW
NtVdm64CreateProcessInternalW
CopyFileExA
LZCreateFileW
FindFirstFileExW

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 105KB - Virtual size: 126KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE