NEAS[.]148263882a9f27dfd3a0b2c668c977e0[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.148263882a9f27dfd3a0b2c668c977e0.exe
Size

66KB
MD5

148263882a9f27dfd3a0b2c668c977e0
SHA1

8398fb6ad7d84c962bf7d34210d24bc22b2b188e
SHA256

44d251af8ef3c7f0d0729d51f99a6a263853a279dae42b98df498b9ea93177a8
SHA512

bb9edde9f6392131dea071521b862fe35b543d6355c42c9c42786b58c67090f11399b9fd4979529060992f8500e73075a6e389583bd06b628a4404e8d16afa50
SSDEEP

768:4CZQ1TOr1gzQ+NxJ6MzxhFVvWVF6qimfHUq+u9FiiByhd/j1F5XNcZL4jdeu+P16:4CZQJXfGuwKxFJSl4jdeMLXOdMPk0JZ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.148263882a9f27dfd3a0b2c668c977e0.exe

Files

NEAS.148263882a9f27dfd3a0b2c668c977e0.exe
.exe windows:4 windows x86

0493ceaecc2dbd06f3b7fe14ad91f226

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SetPriorityClass
DeactivateActCtx
lstrlen
K32EnumProcessModules
BasepQueryAppCompat
SetEnvironmentVariableA
SetProcessMitigationPolicy
SetInformationJobObject
GetConsoleAliasExesW
SetConsolePalette

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 51KB - Virtual size: 70KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE