NEAS[.]1781921703fa32e16beef8d73a5feb00[.]exe | Triage

Sharing

General

Target

NEAS.1781921703fa32e16beef8d73a5feb00.exe
Size

66KB
MD5

1781921703fa32e16beef8d73a5feb00
SHA1

90457c60ebd0de8dd18c8b7820aad958b7b7ab1e
SHA256

5a2f6c25882bc3b53d561f05cc7cd6929e6900008980e82befdfabe7b96bf333
SHA512

fb39cc08bef5ae91ad7f39c830aca0eed2b84da2a37394d0aff1138e06cdbf39739e35f194c55ff11fe06fdcc5b58d38a7536fb4fcaca484654ff1248a1e83bd
SSDEEP

1536:hU2wwzpnUBOJykF/d1xcAQVkN0lSq3SFjB+5bLTapozDV:hUHinUBuFxXnNwG+5XTWeV

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.1781921703fa32e16beef8d73a5feb00.exe

Files

NEAS.1781921703fa32e16beef8d73a5feb00.exe
.exe windows:4 windows x86

dca9925560c5961d7c0a980d7d02f06c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GlobalCompact
GetThreadContext
NlsEventDataDescCreate
RegDeleteTreeW
AllocateUserPhysicalPages
RegDeleteKeyExA
QueryInformationJobObject
SetThreadPriority
GetNumberOfConsoleInputEvents
GetPhysicallyInstalledSystemMemory

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 51KB - Virtual size: 70KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE