NEAS[.]c844d896367398117a3e9cec82e6b390[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.c844d896367398117a3e9cec82e6b390.exe
Size

66KB
MD5

c844d896367398117a3e9cec82e6b390
SHA1

c4424cbd205b93bcb6fb710f0b0eddaa73688bc2
SHA256

fbaa3f61fa0121b693fe2215e35288e1c64d1cce816c2c330b4d755722ecd556
SHA512

47266d900bf8a25eab4c2eab676e97efa133fbe6471b8ff555e34a8962926f485f874bcc10de2b352e8eb92c59821c79577f7bcc35b6519f84b1b95dcf783054
SSDEEP

1536:mZ6DFaiKPqwjo6LTd2QWirftwe3WlkXMLRT7J51v93:3FaPXjogTd2QTyzNXP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.c844d896367398117a3e9cec82e6b390.exe

Files

NEAS.c844d896367398117a3e9cec82e6b390.exe
.exe windows:4 windows x86

c669159468134498019dd0b44079e9e4

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

DeleteBoundaryDescriptor
FileTimeToLocalFileTime
LZOpenFileA
FindFirstFileTransactedW
GetNLSVersion
GlobalGetAtomNameA
DeleteTimerQueue
GetMailslotInfo
EnumSystemGeoID
GetNumaAvailableMemoryNodeEx

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 51KB - Virtual size: 70KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE