NEAS[.]81eb3bafef0271cabf059d08c44f49e0[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.81eb3bafef0271cabf059d08c44f49e0.exe
Size

66KB
MD5

81eb3bafef0271cabf059d08c44f49e0
SHA1

97373487d5242eb55631d1ddf79aef948c74918e
SHA256

cdfca77cf8d7e73c693a42850c674bd8be99ada96ec8d6669e22e8d235aac038
SHA512

15c66d79dcea7e432fbaf9f2211a971f2d27e0da096801716d6a1d39019149302560c9aa906fe31e489b5555c47a0a92daf30de6a9a456b88cdba0acd5603bee
SSDEEP

1536:LwjyGMjDaui0Q47JsAw7PmsdRMUAajO1BdZooSqb7RcHlSFFw2sfWzK8AhD0KV0i:L8BX5mIs7lP3ORr9

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.81eb3bafef0271cabf059d08c44f49e0.exe

Files

NEAS.81eb3bafef0271cabf059d08c44f49e0.exe
.exe windows:4 windows x86

6538fa787aedd7f7e6f7184539a4a71a

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetLogicalProcessorInformationEx
SetProcessDynamicEHContinuationTargets
timeGetDevCaps
AllocateUserPhysicalPagesNuma
PssCaptureSnapshot
GetSystemTimePreciseAsFileTime
GetACP
SetProtectedPolicy
GetProfileIntA

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 51KB - Virtual size: 70KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE