NEAS[.]24407fec523c80604a01e3b4decfb1b0[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.24407fec523c80604a01e3b4decfb1b0.exe
Size

121KB
MD5

24407fec523c80604a01e3b4decfb1b0
SHA1

58160f5358e39877adb821301b3138bd2616a900
SHA256

2243d4a8b73a73f9b68706dcd254e999b37176bf85555b40d3d6c0b939fff759
SHA512

7d3c11965a0c0ed1f846ff7268c0cf83340855629abbf93749b7c469303547d7798377dcc3fbdaccc21906cc7c40b705e1eb4f60e7030e42b61c690b478ec3be
SSDEEP

1536:x939s3EDBF1XC4OOyIetRYBzSrKA/erH5/gS/WiIScdI6RJV9zbn8BGwJXFVTSDe:x9hXzZ+RY02rvIScj3znsdfTSD1GAQz

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.24407fec523c80604a01e3b4decfb1b0.exe

Files

NEAS.24407fec523c80604a01e3b4decfb1b0.exe
.exe windows:4 windows x86

aad98b71cb466f0c7b973c4b0aa10bd2

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ReadFileEx
WriteConsoleOutputA
DnsHostnameToComputerNameA
UTUnRegister
CallNamedPipeA
DeleteCriticalSection
GetNamedPipeInfo
SetVolumeLabelA
InterlockedIncrement
ChangeTimerQueueTimer
QueryDosDeviceA

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE