NEAS[.]2e7505cc153666821f28f006faf6b9f0[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.2e7505cc153666821f28f006faf6b9f0.exe
Size

119KB
MD5

2e7505cc153666821f28f006faf6b9f0
SHA1

ff00dea8f512f1ca3c1881587ae2e7ebd45c9afb
SHA256

316112d404f5fa08d886ed75a2a7d2f1868b21b139a810cc9b1933d39479bb01
SHA512

f8d1e3216e3b0dee0226a068f849c955f4b0890bb02c645ee5c31be0a56851703f4f7d936180efe805a188f5edc825c88e7ecb6cc439563bd4d4b1316108aa9b
SSDEEP

3072:tMphMfTpu5MwA5MY5D7x9vRSsp3weL+08TFXu:iphshj5txR1VnB85e

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.2e7505cc153666821f28f006faf6b9f0.exe

Files

NEAS.2e7505cc153666821f28f006faf6b9f0.exe
.exe windows:4 windows x86 arch:x86

e383c879606dba015eb48f8471e3a308

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetFileAttributesExA
SetThreadpoolThreadMaximum
IsSystemResumeAutomatic
RequestWakeupLatency
LockFileEx
SetFileCompletionNotificationModes
GetConsoleHardwareState
CreateFileMappingW
BaseUpdateVDMEntry

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 105KB - Virtual size: 126KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE