NEAS[.]83667899a3bf074fb0e18ef474f19cb0[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.83667899a3bf074fb0e18ef474f19cb0.exe
Size

66KB
MD5

83667899a3bf074fb0e18ef474f19cb0
SHA1

86bdf2a21e3f0a441c9ee7c52bcb783e323ad2fe
SHA256

5dcfd0ca4bcd2c2046289cd0179c9019a24cfdd8d425109a46633889ce53dc41
SHA512

cd8881d29a5a23c38f44d1b8bba5537ed30b6357e14307fc171b6d89f3a29b8055fdb041858ff05c64c93f70c26a9ca538362329a789a26e2a391bfe345559af
SSDEEP

1536:GPmk1OOSq6y/ZDtuzAKezp0Yv+lWUGN2f7easJihnU:GPmcOFd0gzJevWlyN2f7e3ihU

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.83667899a3bf074fb0e18ef474f19cb0.exe

Files

NEAS.83667899a3bf074fb0e18ef474f19cb0.exe
.exe windows:4 windows x86

48a7efe4f0baf1fd29aaeffd737716de

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateFileA
RestoreLastError
GetNamedPipeClientComputerNameW
WakeAllConditionVariable
DelayLoadFailureHook
IsBadHugeReadPtr
WritePrivateProfileSectionA
GetCompressedFileSizeTransactedA
SetThreadPriority

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 51KB - Virtual size: 70KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE