NEAS[.]f24a36f7c05d2ef48df83f23ffa57cb0[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.f24a36f7c05d2ef48df83f23ffa57cb0.exe
Size

66KB
MD5

f24a36f7c05d2ef48df83f23ffa57cb0
SHA1

b73274958176c4567830561f0a7cd6a48c660cd6
SHA256

909dfd51b3d16e160fe60e386cecdf4e652555db149e81443c4f29a3cfd3d90e
SHA512

05550bac02ca57029300b1c6d52828c4b55626961c10a46e746f2f482410bc9bc07c23d4bfe09d1a4e23799ef36d3086a665edd01622ed2531ade9b963c9f168
SSDEEP

1536:Ea5v2Q7rPAGDHKV8EfIK5tFo/gTRFJAiYLjqjnj/CdcylqM:vv377cVX5kiRXn1jnj/gb

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.f24a36f7c05d2ef48df83f23ffa57cb0.exe

Files

NEAS.f24a36f7c05d2ef48df83f23ffa57cb0.exe
.exe windows:4 windows x86

e9ab88f2ad5b694010edbee5539a859f

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

WaitForThreadpoolWorkCallbacks
TzSpecificLocalTimeToSystemTime
ReleaseMutexWhenCallbackReturns
CreateWaitableTimerW
PssWalkMarkerSeekToBeginning
SetThreadIdealProcessor
SetLocaleInfoA
FreeEnvironmentStringsA

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 51KB - Virtual size: 70KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE