NEAS[.]b8046c6f7c455e0522836655c11a4210[.]exe | Triage

Sharing

General

Target

NEAS.b8046c6f7c455e0522836655c11a4210.exe
Size

66KB
MD5

b8046c6f7c455e0522836655c11a4210
SHA1

a0361934c8520d77aa3fc39f409c7d0bdba924c1
SHA256

294f0fd6fd9b25e2dd7c45f1b88a7ba499cf9a4b10e9aef8f1615221add324c8
SHA512

9584573d828b2986c44b2752707e23e58594e6fbc0b282fba414404196d9f2f2ece83ef85b74ae631f8463824e47858eb19132ca2710ddfbb13d066cc9ce8c05
SSDEEP

1536:KjeDGckFmFrs2xY3ujN1BpUP3KYqzkaml6YAnfVdgGYYCWyxJg1V6sm7:K7ckFSq3uH8P3KYqbmlFAnfVddUk2s+

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.b8046c6f7c455e0522836655c11a4210.exe

Files

NEAS.b8046c6f7c455e0522836655c11a4210.exe
.exe windows:4 windows x86

57d5bdca5192c932c5488e47ac433a91

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetStateFolder
TlsGetValue
SetEnvironmentVariableA
GetProcessHandleCount
SetNamedPipeHandleState
WaitForSingleObject
DebugBreakProcess
RegSaveKeyExA
SetThreadExecutionState
CmdBatNotification

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 51KB - Virtual size: 70KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE