NEAS[.]9ee3f55077f12290cc36aee2a0aad580[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.9ee3f55077f12290cc36aee2a0aad580.exe
Size

66KB
MD5

9ee3f55077f12290cc36aee2a0aad580
SHA1

12c8cf2e770babb6913126bef6cf6517aaec3421
SHA256

38b0f3f312b9dd29b8c777cb01886005e4de6bfe1e75c715160f536178bd9d65
SHA512

3b60c9886a13aea5f36882eb65a6a8ddf1e76e5782daab2723b6621f6a5c901d7c3442657966a58f1c6065d0928d0b4f8261f27c8f174a0041b930d9417239b2
SSDEEP

1536:PV5QYr+Vygs75FcELYheqmFjcGrLcgPx8N/2ZB:OygswwqmLsg+/M

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.9ee3f55077f12290cc36aee2a0aad580.exe

Files

NEAS.9ee3f55077f12290cc36aee2a0aad580.exe
.exe windows:4 windows x86

d50391fb557bc717b30ad9031a6769d9

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

RtlUnwind
RemoveVectoredContinueHandler
LockResource
WriteFile
WerUnregisterMemoryBlockWorker
GetThreadPriorityBoost
CmdBatNotification
WriteConsoleOutputA
DeleteTimerQueue
GetCurrentPackageFullName

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 51KB - Virtual size: 70KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE