NEAS[.]bce3df0cfc645f85f3c28910c51e7220[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.bce3df0cfc645f85f3c28910c51e7220.exe
Size

66KB
MD5

bce3df0cfc645f85f3c28910c51e7220
SHA1

ebf20df02185616e194b6697c95b20248f843d22
SHA256

d4b194ebde68f62e9c91bf89dbd172149ced44a5ac727416c464d6851ee63fbf
SHA512

37bd0aa918659a5b76941b02abfbc19444bbda642368dfc0d17130ed93477fff95a11c0a9ff053b60f533fb986a12a4f5a0a50165fee26b9fdc4bb7c8712d10c
SSDEEP

1536:70tET/gYy9RUAHVAzrErH9oXYyjkt1ITshPdghIfODWo1p:764y9RUAWzWH9oXY6YshpW+

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.bce3df0cfc645f85f3c28910c51e7220.exe

Files

NEAS.bce3df0cfc645f85f3c28910c51e7220.exe
.exe windows:4 windows x86

10fe6901c721d65ac58a4de4830c2633

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetFileInformationByHandle
InitializeEnclave
GetCurrentThread
SetEvent
SetEnvironmentStringsA
ExpungeConsoleCommandHistoryW
LeaveCriticalSectionWhenCallbackReturns
UpdateResourceA
BuildCommDCBAndTimeoutsW

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 51KB - Virtual size: 70KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE