NEAS[.]26ac35a8c1f9121d2598fe03e061ae90[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.26ac35a8c1f9121d2598fe03e061ae90.exe
Size

119KB
MD5

26ac35a8c1f9121d2598fe03e061ae90
SHA1

26391e6a73471d4722878682f7861974959a46fc
SHA256

67ec3133a436fa84880302e30311af3c7be4408f05fb86b5119c05ce678487ea
SHA512

b57c5d036bf6dc2ba81c4c1f0c5820b0fd4b9131cf0b7fe6e821cfb83e0eb6a393a39122dbe8dccc5b75c3e5ceb2795f4a2cedc6e4529875fe3e020e1b182286
SSDEEP

3072:TYjiVFU8iyNMBms3WsQjKUAUJUnGYpOtrrrMxM58E9N1+:UuzNLNHKWsQjDAQZ3S88wX+

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.26ac35a8c1f9121d2598fe03e061ae90.exe

Files

NEAS.26ac35a8c1f9121d2598fe03e061ae90.exe
.exe windows:4 windows x86 arch:x86

4fd7c109e62b39ea21e71e8a3325826f

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

IsValidCalDateTime
RegisterConsoleOS2
CreateHardLinkW
RtlCaptureContext
LZSeek
CreateSymbolicLinkA
lstrcmpA
BasepInitAppCompatData
LoadResource
InterlockedFlushSList
FindStringOrdinal

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 105KB - Virtual size: 126KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE