NEAS[.]febccadcb591c5addf991cefdd2cc2a0[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.febccadcb591c5addf991cefdd2cc2a0.exe
Size

119KB
MD5

febccadcb591c5addf991cefdd2cc2a0
SHA1

bef00aa851534fdd860fa9a2a2b5a45cde2ccae9
SHA256

d67280fcaa4736be0d78b4d57d8a59a74f8e40588dfb79c7ad113186a64c2436
SHA512

634e984dd791e1a115cc650b14dbf65e09e6ede8b38ecc04c2c06679f394e809f3e74001c6275ea70b0beaadcb32adce4cc06e7b552e1d7efb0fabf562459691
SSDEEP

3072:nC4zD2IuxSPb5bwkGG3WMGFMVY7KHoomc+bg0ZXm8XAE:nCMDZuGxhN3/GSVkKIob+EkW8XAE

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.febccadcb591c5addf991cefdd2cc2a0.exe

Files

NEAS.febccadcb591c5addf991cefdd2cc2a0.exe
.exe windows:4 windows x86 arch:x86

d7ce159df8f27d9578e67225740641b7

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GlobalAddAtomExW
GetProcessPreferredUILanguages
EnumSystemGeoNames
CreateJobObjectW
VirtualLock
GetFullPathNameTransactedA
OpenMutexW
GetNumberFormatEx
GlobalAddAtomA
TermsrvSetKeySecurity

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 105KB - Virtual size: 126KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE