NEAS[.]a8d6d979522626fab8c31d4b9940e920[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.a8d6d979522626fab8c31d4b9940e920.exe
Size

66KB
MD5

a8d6d979522626fab8c31d4b9940e920
SHA1

3442037c9ea6fe690a57b82f85baaca34aa81a8c
SHA256

40e92c3bd83e03a3e2a8ac5cfbf8bbabe4c3744f5caa3be641e3cb57c5bcabb7
SHA512

82263c45907951fc61a480b9893947d17c9823381a373138678a8e8db01853370481ed63a8049642fa9fd38f0abf1551d529fabea3887ed459ad566a8fc25d8b
SSDEEP

1536:bY33iv2tdDsXxMN8WlFmlZk3Xh5KnnmlbZo2mjIZ+1D3inbf9/4Z/HW:M33RxclZRmlOjIZKmbf9/44

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.a8d6d979522626fab8c31d4b9940e920.exe

Files

NEAS.a8d6d979522626fab8c31d4b9940e920.exe
.exe windows:4 windows x86

db36b3393d70ac396363b2b1957a1b46

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

IsCalendarLeapDay
GetSystemPowerStatus
SetConsoleTitleA
CallbackMayRunLong
Thread32First
AppPolicyGetShowDeveloperDiagnostic
CreateHardLinkA
ResolveDelayLoadsFromDll
ReOpenFile
IsNormalizedString

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 51KB - Virtual size: 70KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE