NEAS[.]1d854298d71c8104f1e86a8434c04dc0[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.1d854298d71c8104f1e86a8434c04dc0.exe
Size

320KB
MD5

1d854298d71c8104f1e86a8434c04dc0
SHA1

2a9a09b3f10a0e9e5dab00cf51c713b229260164
SHA256

1d450662528ac44259347b3303cf4e7c7e1bc1ebc2d2e3158ae569e467aed81a
SHA512

881771d0a0377561a9a3cdf0b39e49efdbd285787082d61c8d82a2a012f781f956d720bde9b60397b338316e9627b877980bdb41abede6da2d0345ded745232c
SSDEEP

6144:YJTSTExuD3LH2RfS155ONNXBuWoJBO9OMbHLkAqF7Ief9UmM7/uT:YJ2nDD2EB0NxDIBuOFe7/uT

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.1d854298d71c8104f1e86a8434c04dc0.exe

Files

NEAS.1d854298d71c8104f1e86a8434c04dc0.exe
.exe windows:4 windows x86

aa20aa35c7df5bae7662520cc2c7481b

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LocalAlloc
InterlockedExchange
GetCommTimeouts
GetAtomNameA
GetSystemWow64DirectoryW
AreFileApisANSI
GlobalAddAtomW
CreateThread
FindActCtxSectionGuid
SetLocalPrimaryComputerNameW
FindCloseChangeNotification

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.brdata
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tc
Size: 244KB - Virtual size: 244KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE