NEAS[.]187e384a1267edb26bef7b7328933750[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.187e384a1267edb26bef7b7328933750.exe
Size

66KB
MD5

187e384a1267edb26bef7b7328933750
SHA1

12c96bfec2d10e5df6753feed357519cdb9a7698
SHA256

a6c8bf6012ddb3e2b10df5080824225b1e5c8ef2823df5bfccda920159095744
SHA512

9b520f72af02e02323853dfd25a83af65feef7f0bf1b4b8ccfdbef4b2cae8c85a395ae03020ff8b967b290eb03735a71e884394591e8cbf010e411e84a5e96c9
SSDEEP

1536:QNV5yVBA3H8vOkhxbTjHa1JPiuq3osPZ912E:OcBAXgOkh1HQFUosPEE

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.187e384a1267edb26bef7b7328933750.exe

Files

NEAS.187e384a1267edb26bef7b7328933750.exe
.exe windows:4 windows x86

1569c24d2fad76ce4b144de5d43e617d

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetVolumeInformationA
GlobalGetAtomNameW
BaseFormatObjectAttributes
SetMailslotInfo
SetThreadToken
GetOEMCP
CreateFiber
AllocateUserPhysicalPagesNuma
CreateMutexExW
GetPackagePath
OpenSemaphoreW

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 51KB - Virtual size: 70KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE