NEAS[.]a00ee66d5ad5a829c15de04db7ee8050[.]exe | Triage

Sharing

General

Target

NEAS.a00ee66d5ad5a829c15de04db7ee8050.exe
Size

66KB
MD5

a00ee66d5ad5a829c15de04db7ee8050
SHA1

a7910943f7a8f71b1b413c4e698b81dd0dbbc9fe
SHA256

086c21aaf36ccf3418547e21e00f8f45ff2f89b1820cf3272effafa1b2fd382d
SHA512

d9fb69f9fe4bac4125f433b326b6396b6cbc2af26913780d4e07d4dc25fce98202490b0d5ddb24971012a18a56c7c059e187f8d1db679d7b42157421f9decd27
SSDEEP

1536:GruBP3gKEcn2CIjkZ9+A5vR7paBmzDAyQ3DcPIfBPY+TWHx:NPQKEOIjk7R5vRYmzDAyQTcirqR

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.a00ee66d5ad5a829c15de04db7ee8050.exe

Files

NEAS.a00ee66d5ad5a829c15de04db7ee8050.exe
.exe windows:4 windows x86

fa914439a72ef7fe33ea5f4dc8a3541b

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetSystemCpuSetInformation
FindFirstStreamW
AllocateUserPhysicalPagesNuma
CreateThreadpoolCleanupGroup
DeleteSynchronizationBarrier
SetThreadErrorMode
EnumResourceTypesExA
FindFirstFileExA
RestoreLastError

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 51KB - Virtual size: 70KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE