NEAS[.]1aca635eefd73f8d64e4a10e1e5e1ce0[.]exe | Triage

Sharing

General

Target

NEAS.1aca635eefd73f8d64e4a10e1e5e1ce0.exe
Size

83KB
MD5

1aca635eefd73f8d64e4a10e1e5e1ce0
SHA1

dc79b314122453d37bbf81e792a258d0a32a1260
SHA256

210e0bf8c9edef4541d1cb93f0bf3e22b9cbc9ac8646a8dcdb373f367b91a86c
SHA512

ad288230539e983343ed8d6f81a61c8e360c297ce883b0aed1d8b70a68f380ccf6e5f6c610dde704c7251ae345ea64dd76335e7ede8ca643d3a41da16f99280d
SSDEEP

1536:5FFF0o8lJqeucCbMsbeiVb29hoNi/Tg7dcvblHln6cGoPLfnTLAqw0+Cq2zwSqBN:0Cb+kZpH5ZgZ7UTSHs2q

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.1aca635eefd73f8d64e4a10e1e5e1ce0.exe

Files

NEAS.1aca635eefd73f8d64e4a10e1e5e1ce0.exe
.exe windows:4 windows x86

c490303320552af7fc4acba13c654061

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetConsoleInputExeNameA
lstrcatW
LoadLibraryExA
WriteTapemark
BeginUpdateResourceA
GetLocaleInfoW
InvalidateConsoleDIBits
CheckNameLegalDOS8Dot3A
GetSystemDefaultLangID
BackupSeek
AddConsoleAliasW

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.brdata
Size: 27KB - Virtual size: 48KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE