NEAS[.]5ef837126830a9b0d5d6efabc1fdb9a0[.]exe | Triage

Sharing

General

Target

NEAS.5ef837126830a9b0d5d6efabc1fdb9a0.exe
Size

66KB
MD5

5ef837126830a9b0d5d6efabc1fdb9a0
SHA1

7afaa732bdc2e7d7fa014103a63ecbb061bb168f
SHA256

60ff93379d786812fb2c4386b555d92977434672a2d15bd9f0a62f643d0cb3d9
SHA512

e733a12311a5962ade1ed734ab5f2255e7bf613b52b59956201d316c6e53ff131db2fc15aa86d1f5337c2d4995a204d560ba5fbf6f9607f2b83afc12c3669a3f
SSDEEP

1536:po0SmHl/5xgFDPWbCfQies9HozGEkd/I9/rWfdXsKto8:po0SmHN3gFDPwaQiZIKEuQ9/2ap8

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.5ef837126830a9b0d5d6efabc1fdb9a0.exe

Files

NEAS.5ef837126830a9b0d5d6efabc1fdb9a0.exe
.exe windows:4 windows x86

e67d043144ef4594acd563164e4db696

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SetConsoleDisplayMode
CreateEnclave
GetLocaleInfoA
Wow64SuspendThread
GetStringScripts
GetCompressedFileSizeTransactedA
NlsUpdateSystemLocale
SetSystemFileCacheSize
K32EnumPageFilesA
FindAtomA

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 51KB - Virtual size: 70KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE