NEAS[.]2a48ea220b8bbf7aa9459e50d5d6cc70[.]exe | Triage

Sharing

General

Target

NEAS.2a48ea220b8bbf7aa9459e50d5d6cc70.exe
Size

91KB
MD5

2a48ea220b8bbf7aa9459e50d5d6cc70
SHA1

9e50a8341d4e202884905e915152bcea3a3373c2
SHA256

1a2f543dcc12124661a941cf08755b8db7aee85c0c8c7d129380c1b8f1126b83
SHA512

3c5e5c2f081661f91743af701ba1e26d09da2fa0fe8938afb1eaa914b147c37c1ec1bf90d296f5a9548bae0d8719b385907ccb886aa20108776e2ad60b4c90ba
SSDEEP

1536:nxOgfbjFlmN6YEFW/zBUx2YzGC675oJvmOE0BjIgpmJZWlciigZ6AVkANB8xb:nxTTjFBoV0mqJ/9kgpgZW+hO6wnNKxb

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.2a48ea220b8bbf7aa9459e50d5d6cc70.exe

Files

NEAS.2a48ea220b8bbf7aa9459e50d5d6cc70.exe
.exe windows:4 windows x86

4f8ab3f7b2e8c075c3b2bb7d0f8598bd

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

HeapCompact
CreateDirectoryExW
GetWindowsDirectoryA
GetUserDefaultLCID
CheckNameLegalDOS8Dot3W
LZClose
InterlockedIncrement
WriteConsoleInputW
RegisterWaitForSingleObjectEx
ExpungeConsoleCommandHistoryW

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 77KB - Virtual size: 98KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE