NEAS[.]38dcaa676814e74749d1f7bb6f077070[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.38dcaa676814e74749d1f7bb6f077070.exe
Size

83KB
MD5

38dcaa676814e74749d1f7bb6f077070
SHA1

22ff9712e6464a98acc31649ad25b24e005b17f4
SHA256

231fb1b183740a457cf91167f2785465bdfe0f81aae1e61064e9e2e8c97af3c6
SHA512

be84aa919772afc75e0de3318b9bef7e8a8dfb6b30e92b31c31a61d0ef55c4e4f52be87e88dcad3de3a10623577e38bc5b26e28a2be3478431d8422b38e454a6
SSDEEP

1536:fSvsTgY95w27dzKV2vyOpneX7nKCGw1dVXMf0jEErxTWDTMqhGKYIZTET82fb:fSkgaSY6CncnKUMsjBkMqhGKZTb2D

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.38dcaa676814e74749d1f7bb6f077070.exe

Files

NEAS.38dcaa676814e74749d1f7bb6f077070.exe
.exe windows:4 windows x86

cc54cf5736e2ba77b923286ed21c48b2

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

UnregisterConsoleIME
SetLocalPrimaryComputerNameA
CreateFiber
WriteConsoleOutputW
GetConsoleCP
CreateIoCompletionPort
GetConsoleFontInfo
UnhandledExceptionFilter
TlsSetValue
GetProfileStringA

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.zrdata
Size: 27KB - Virtual size: 44KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE