NEAS[.]97896121cd8ef0796d3169b4a8661940[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.97896121cd8ef0796d3169b4a8661940.exe
Size

66KB
MD5

97896121cd8ef0796d3169b4a8661940
SHA1

913f662c9ed6093f820b7fea7f07aa9a60363697
SHA256

9a2018b7dd15d8d880e4641b6f85949b6f246bbe712581a74bb0ad885d5c9f42
SHA512

267fac6d12324861ed94f24dabac612a981827dd27d34ff7e89e5275e01ca2c0e2ea94210ba249a71ca4cf4d66e4849c10f254c787a97382201ea90bb064b737
SSDEEP

1536:vpFjcte3l3x4cjQQHg1Bi8vLWpSjIaGt++bG7BZUNY4ehDz28Uzol1bpq5mbc26:BFAte3l3jQQA1BigqpSjQbqBzxzEzoTO

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.97896121cd8ef0796d3169b4a8661940.exe

Files

NEAS.97896121cd8ef0796d3169b4a8661940.exe
.exe windows:4 windows x86

0cd3f55647e503c0c6ec63966ef99194

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcessHeap
ResolveLocaleName
DeleteProcThreadAttributeList
GetNumberFormatA
LZDone
GetProcessIoCounters
GetLargestConsoleWindowSize
RequestDeviceWakeup
CreateJobObjectA
CopyFileExW
FindFirstVolumeW

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 51KB - Virtual size: 70KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE