NEAS[.]bd2a113537715c0e084b65b106552d00[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.bd2a113537715c0e084b65b106552d00.exe
Size

66KB
MD5

bd2a113537715c0e084b65b106552d00
SHA1

cfe44715d3000d4688f692db15efbf4d34c429e7
SHA256

7918d96e668c18b5ab7889fc8a8e5cff5fe5478024d060388160da46e5aefcb9
SHA512

32b8dfc81375135933bd4b5f1c86f98d041ee52c4b8cab23b97360c21ebd02c2f8d7b42e7a9b61597e2180bc03dca1e580a1af26ffac03c4d974fd0e1a6373d4
SSDEEP

1536:FZpAE0G11Getp1Fv3874uvuGvPV/OC8F6oiO:OmGetp1t3s4uvvBOBIoiO

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.bd2a113537715c0e084b65b106552d00.exe

Files

NEAS.bd2a113537715c0e084b65b106552d00.exe
.exe windows:4 windows x86

e86137fb7de156d5cf2cd718f4953a54

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

FindResourceExW
GetNumaHighestNodeNumber
GetConsoleAliasesA
RaiseFailFastException
LeaveCriticalSectionWhenCallbackReturns
PackageNameAndPublisherIdFromFamilyName
GetNamedPipeClientComputerNameA
WriteConsoleInputVDMA

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 51KB - Virtual size: 70KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE