NEAS[.]edbdf5887eebcb64f57e06338690ee10[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.edbdf5887eebcb64f57e06338690ee10.exe
Size

119KB
MD5

edbdf5887eebcb64f57e06338690ee10
SHA1

8092297b8a3910992f0f98f9072b18aff00c04d9
SHA256

1d50be8ec4234d486a50615f9eeb28dc904398aef4757d647a3f27f482fd2f4e
SHA512

e0811bc0229012ed428db0caff9111c43763992bcc72b267ae6cab3d76003a28784cfa57951eeae026d3e660745d5c3becc5e92c1d31003eacacd4d85e6de7a6
SSDEEP

3072:icEMA0J0DTVriXQN0zrqO57aEb+RiUEcMxnHAr7eagoc20k:H7CPVGuiqQaq+cUL4zoH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.edbdf5887eebcb64f57e06338690ee10.exe

Files

NEAS.edbdf5887eebcb64f57e06338690ee10.exe
.exe windows:4 windows x86 arch:x86

4c4ff3adf2237a336718b29ea8c40fb0

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateSemaphoreExA
GetProfileStringA
K32GetPerformanceInfo
EnumTimeFormatsW
GetExitCodeThread
PackageFamilyNameFromFullName
OpenState
VirtualFreeEx
CopyFileTransactedA
GetThreadSelectedCpuSets

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 105KB - Virtual size: 126KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE