NEAS[.]796e814ff8f1dc440bdd51da91f542c0[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.796e814ff8f1dc440bdd51da91f542c0.exe
Size

66KB
MD5

796e814ff8f1dc440bdd51da91f542c0
SHA1

4a9c3bf7f76d144eadce022799166cbab7ca9335
SHA256

ab1d261cac4ca6ae729b1f343154bc7470b0230f56e6261d582f1ed516388f7b
SHA512

61f5494ffa0dc1550ade40f62c03113f723a1dc670aeed763b11027da27a2e8874ce425ac07482d15383f27d28bec6b7f559d8dea4fb2865e9ceb8f21587c5cb
SSDEEP

1536:anr01IJcOTZUhE8yOpIZJam/qHsLSu+GVNikBRCJ3er154nL:aYWGOT+q8yAIZL/qHseHGVIJNeb4L

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.796e814ff8f1dc440bdd51da91f542c0.exe

Files

NEAS.796e814ff8f1dc440bdd51da91f542c0.exe
.exe windows:4 windows x86

a85b89c262fc2dc8350e76a8dff8a314

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateWaitableTimerA
ReadConsoleOutputW
SetSystemPowerState
LocalCompact
InitializeSListHead
WerUnregisterAppLocalDump
EnumSystemLanguageGroupsW
AddLocalAlternateComputerNameW
MapViewOfFile
WriteConsoleInputVDMW

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 51KB - Virtual size: 70KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE