NEAS[.]f989996fbcab839fbcf32f125da1e950[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.f989996fbcab839fbcf32f125da1e950.exe
Size

66KB
MD5

f989996fbcab839fbcf32f125da1e950
SHA1

63ad8f06c0c809015cd2864b2bdc4ee9dc4ce9b5
SHA256

75b21ccc21111f6f6a9c881889b14cff2247f0969bb83ce88c1e51dc4c23eae3
SHA512

a67705af70fdafc70e6ad6593132158ba457c335d8d0eb7761a9b4ba0e88bae96df5a682da11166c2056e8ebe5e9d0c765fda17e2d9155e051b6b9a155779190
SSDEEP

1536:1B9/ILQ788abDRH7aeEPnGa1xEZYBiZCLKYqceU2SczKKyP4Thl26V43XU:1BFIa88gDl7aexa1qZYBiZCLmce/9KpI

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.f989996fbcab839fbcf32f125da1e950.exe

Files

NEAS.f989996fbcab839fbcf32f125da1e950.exe
.exe windows:4 windows x86

cf358d741e3ae98679ee7a0922bda589

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetNumaAvailableMemoryNode
GetDateFormatAWorker
CreateFileMappingNumaA
lstrcatW
CallNamedPipeA
SetWaitableTimerEx
GetSystemDirectoryW
EncodePointer
GetProcessorSystemCycleTime
SetLastConsoleEventActive

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 51KB - Virtual size: 70KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE