NEAS[.]56efb7b1a8a1499e76646497b28a5a50[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.56efb7b1a8a1499e76646497b28a5a50.exe
Size

66KB
MD5

56efb7b1a8a1499e76646497b28a5a50
SHA1

35d0dbae53346246046aa5e22fbf0bc59151cc05
SHA256

6a93c4e6c94eccb5cb697799fa07d99a71accbff8ebaee1b45cc619bbc7ed63c
SHA512

a512dcc5cc39bd4450686dae68b5c14e6e8e1776c3f30642f775166edcacf11d061b5f56c55f8f7bed50595cb503a1a65517fe67394322a8197b538329d505cd
SSDEEP

1536:+MmZ2LBE5BTuNlbnecg2Oop0LUSIt801f:+ZZdByNhg2Oop0BXSf

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.56efb7b1a8a1499e76646497b28a5a50.exe

Files

NEAS.56efb7b1a8a1499e76646497b28a5a50.exe
.exe windows:4 windows x86

7222e68b1ff24aff7d495a8ebc677317

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetXStateFeaturesMask
CreateFileA
EnumSystemCodePagesW
FindFirstStreamW
WriteConsoleInputVDMA
WerRegisterFileWorker
GetTimeFormatW
CloseThreadpoolCleanupGroupMembers
GetCalendarDateFormat
SetEventWhenCallbackReturns

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 51KB - Virtual size: 70KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE