NEAS[.]a02481bce4e44b8c59f4f2f43c9a9890[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.a02481bce4e44b8c59f4f2f43c9a9890.exe
Size

66KB
MD5

a02481bce4e44b8c59f4f2f43c9a9890
SHA1

2bb7b8a17afb4dcc6467a69ca72617f2eeae48b3
SHA256

d8e931ac0fe4f910b9ac80e35f2bd6b00e122e305d219ec927361d3a47246e0d
SHA512

bf3439c5a7ab7f2c84d8e642f38bcfa87d01b07314afc62945f5e6030ab5be05d6b40f806d83985b9af75caf4aa0c70772150e6c560db66a1498e05c807e1a9f
SSDEEP

1536:xZfmUYizy64f/TBSIzO1zN5VB1mDzPsNVtn0Z7:HDJ4XtOpj1LNVtn2

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.a02481bce4e44b8c59f4f2f43c9a9890.exe

Files

NEAS.a02481bce4e44b8c59f4f2f43c9a9890.exe
.exe windows:4 windows x86

d34f310e84a13140c08e0996704ea0ca

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

OpenConsoleWStub
DosPathToSessionPathA
PssWalkMarkerSeekToBeginning
ResolveDelayLoadedAPI
WriteConsoleW
OpenState
GetGeoInfoEx
SetCommTimeouts
GetComputerNameExA
CloseThreadpoolCleanupGroupMembers

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 51KB - Virtual size: 70KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE