NEAS[.]b23de8edfb5fd92748410e07e4329200[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.b23de8edfb5fd92748410e07e4329200.exe
Size

66KB
MD5

b23de8edfb5fd92748410e07e4329200
SHA1

a00e63633b2174a7dcc8ba79bc077a83c68bdb08
SHA256

701ddaeb32553ef5696ce7c96f1645502cdb56e444a5d07864533b6db9821889
SHA512

e073f355286ced6390e9ad7f1966e18e27a684bd46ee238879ba5dafb1fee592578635a9f61c5d40d4b2b4d388e9e587258dc3aca2b6eaa7a2b2c030590d29a7
SSDEEP

1536:NOFqZ4ZziKzuDz2lzi/Wv6HTHYUFyipnf:sF3HizAEWCz4UFyipf

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.b23de8edfb5fd92748410e07e4329200.exe

Files

NEAS.b23de8edfb5fd92748410e07e4329200.exe
.exe windows:4 windows x86

5160c3236b88e2f4a840f9cb948657da

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

WerUnregisterAppLocalDump
ClearCommError
SetComputerNameW
GetUserDefaultLocaleName
LocalSize
EnumDateFormatsExA
WriteConsoleW
CreateJobSet
RegisterConsoleVDM
GetFirmwareType
IsValidCodePage

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 51KB - Virtual size: 70KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE