NEAS[.]a0b0109511e00e35cf17a59f4dd74620[.]exe | Triage

Sharing

General

Target

NEAS.a0b0109511e00e35cf17a59f4dd74620.exe
Size

92KB
MD5

a0b0109511e00e35cf17a59f4dd74620
SHA1

156bb758cc598355c8a66e3d112c3201d135cf38
SHA256

26cda73367b7e274b4e71d0864c4460b34ff41a99624907778ed05da40a9bc15
SHA512

e8eeba515b38c6e1da3115b90a6662e569f4d188cd272bbface50c4c682dcab5124364330cf15c7e7199275f47887f2d7557cac15f5ba050c1a280445394ac8f
SSDEEP

1536:jq7kfpGhmh7r2C9QMEqoOf8jumvyoJb8YLW14jEErxTWDTMqhGKYIZTET8u5j65b:O76wmh739QrOE8nOjBkMqhGKZTbuwgWW

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.a0b0109511e00e35cf17a59f4dd74620.exe

Files

NEAS.a0b0109511e00e35cf17a59f4dd74620.exe
.exe windows:4 windows x86

c983775d260f68e7cfdb426df2863abc

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

MapViewOfFileEx
ReadConsoleInputW
GetDllDirectoryA
GetProfileStringW
CreateActCtxA
FillConsoleOutputAttribute
FindFirstVolumeMountPointW
WaitNamedPipeA
GetConsoleHardwareState
GetCommandLineW

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.zrdata
Size: 26KB - Virtual size: 44KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE