NEAS[.]2de9f98eba3504bebfa1db7924912dd0[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.2de9f98eba3504bebfa1db7924912dd0.exe
Size

119KB
MD5

2de9f98eba3504bebfa1db7924912dd0
SHA1

28b35c831269b85ed86b3d60dd8cc3558ec13c46
SHA256

fc1136f61a01a244accf7065253a53de568a29357d2662e8b5bc32610d09de9b
SHA512

5ae0c1d179149f95d8aeaab8ddff51b6452bfddcf0c5d2619b5d5d0bf9bf7b9b3e04d4d101c5847f0c203be2e8874bb0afd549408a5c81f7c67b3168192ad33a
SSDEEP

3072:UOxeFTQbu7KhUVdL1I0UfCARrba1X59hjFY9ksja2uvK:UVQbux/p6ur9hjF+a2ui

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.2de9f98eba3504bebfa1db7924912dd0.exe

Files

NEAS.2de9f98eba3504bebfa1db7924912dd0.exe
.exe windows:4 windows x86 arch:x86

1037ead16015720e9a3cac3f42662049

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetTimeFormatEx
BaseCheckAppcompatCacheExWorker
BuildCommDCBA
GetConsoleAliasesLengthA
LocalFree
EnumResourceTypesExA
CompareStringEx
Wow64RevertWow64FsRedirection
SetVolumeLabelW
FlsFree
GlobalLock

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 105KB - Virtual size: 126KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE