NEAS[.]26d6dc0ab1d19dd247d12011aea72e40[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.26d6dc0ab1d19dd247d12011aea72e40.exe
Size

66KB
MD5

26d6dc0ab1d19dd247d12011aea72e40
SHA1

dcc6b5f330c08d3f2040ff774ab1f2abfbcac6a8
SHA256

8ae0207b762b915a8e1a4f04a6311cd9b77b22e9f75d289f65bfe3d3f2041dcb
SHA512

64a476f18149a93cdeddca37075d6edb3d6b7e43c7c8a087c1e1f6342801f2206ee8e340061d97c127e90834acb09d9fc8b0f56f83c61672e4c1d90f51e0de20
SSDEEP

1536:KDdy3YYtpQtwbO45Hd8mLYRHu6VJtTF0twDK4hJ7Bx:AAJW74598mGDJLrGS/x

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.26d6dc0ab1d19dd247d12011aea72e40.exe

Files

NEAS.26d6dc0ab1d19dd247d12011aea72e40.exe
.exe windows:4 windows x86

cea9029cc6e03065a94291cfa4b53248

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

EnumSystemCodePagesA
ReadConsoleInputExA
EnumTimeFormatsEx
WerUnregisterAdditionalProcess
GetFirmwareType
QueryActCtxSettingsW
FindFirstFileNameTransactedW
K32GetModuleInformation
InitializeCriticalSection

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 51KB - Virtual size: 70KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE