NEAS[.]3f1f40f63a8331d577a29534d67e8ae0[.]exe | Triage

Sharing

General

Target

NEAS.3f1f40f63a8331d577a29534d67e8ae0.exe
Size

66KB
MD5

3f1f40f63a8331d577a29534d67e8ae0
SHA1

fc45116f32d56b7532fdc0f1d4b2d7c1f04c0b16
SHA256

f2ea2ca5de1d0b2d0a307414325c7f459372b40538cd8b3e549bf7795c895087
SHA512

bb62f970e549ac4d50b86049e301a438028333daf24ee3ddbbe9d3d1a2176b44bfbb6c56ea1d391e890b5b2b8dde47422887e87d7c7dd4a85863450a2de26a0d
SSDEEP

1536:AFGQNYtTZpqO1hJyX61e9oUrO22qz95DKJVZtu:AgQNYt1FJyX6w9+u9qZ8

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.3f1f40f63a8331d577a29534d67e8ae0.exe

Files

NEAS.3f1f40f63a8331d577a29534d67e8ae0.exe
.exe windows:4 windows x86

0f2778f44a227988baa566093fa9c2f1

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SetPriorityClass
FormatMessageA
SetThreadpoolWaitEx
SetConsoleHardwareState
SetDllDirectoryW
ConvertNLSDayOfWeekToWin32DayOfWeek
BasepProcessInvalidImage
SetProcessDefaultCpuSets
K32EnumProcesses

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 51KB - Virtual size: 70KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE