NEAS[.]e9be3f83ad8dce0c0ec41aedfff74700[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.e9be3f83ad8dce0c0ec41aedfff74700.exe
Size

66KB
MD5

e9be3f83ad8dce0c0ec41aedfff74700
SHA1

9d1b52ba6a11ab9ff7a974a3c4fc64aebc4bcded
SHA256

fc12b694c4d3df45f3a938fe96539fd48939fc5bffe7d4b5b90b0311f95686ce
SHA512

81e1a7623c6d6236149924ad247e1e4eef1036cb997b0b9af2d5138c3ac4e5dc8d15fc5d9e6d9e2847718c42a54242946f277325fe34be102f3fd72818415a27
SSDEEP

1536:SqiBC7vMw2bnvxYrD8LuZjsct039Q49h+B9HUdFJWphpTkEJbB0B+2xsxeyY1UVc:Sp45LmtpSporFsj0o185bp

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.e9be3f83ad8dce0c0ec41aedfff74700.exe

Files

NEAS.e9be3f83ad8dce0c0ec41aedfff74700.exe
.exe windows:4 windows x86

edede860bb097c9db8e0c22c15602ad5

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SetProcessPreferredUILanguages
VirtualAllocEx
AttachConsole
CreateBoundaryDescriptorA
FindNextVolumeA
QueryThreadProfiling
AppPolicyGetShowDeveloperDiagnostic
SetCalendarInfoA
WaitForSingleObjectEx

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 51KB - Virtual size: 70KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE