NEAS[.]fbb8f99af67cb1062f66c5cc6359d310[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.fbb8f99af67cb1062f66c5cc6359d310.exe
Size

66KB
MD5

fbb8f99af67cb1062f66c5cc6359d310
SHA1

7098c9ec7dfdef902936193d0eb4cafedd0a991d
SHA256

48b7c967d25c36d831beecd90ceef3155e4d52665b9ccb4f933989efb663ed1e
SHA512

2f7a8caf9ebdc2cdc26ec878700d89d20af0768f0162e619613ed1b4882aa5ecc98cdfb50c8ad2fe9b2ad247777a9e7ccf69416ecda738d46d0525635e0331d2
SSDEEP

1536:ZRY8uKLyVvkrSSffGsu7GX15vZ3I/r57QQM3FK9qE/zNCGCco:Z1LyVv+VGsltSBp9qE/BlCT

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.fbb8f99af67cb1062f66c5cc6359d310.exe

Files

NEAS.fbb8f99af67cb1062f66c5cc6359d310.exe
.exe windows:4 windows x86

63523cc6a25d9875284ece7b1dac0d27

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcessPriorityBoost
GetSystemTime
GetUserDefaultLCID
GetFullPathNameTransactedW
QueryIdleProcessorCycleTimeEx
SetComputerNameEx2W
FileTimeToSystemTime
RegDisablePredefinedCacheEx
ReleaseMutexWhenCallbackReturns

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 51KB - Virtual size: 70KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE