NEAS[.]d997d45e5e56093d6eb3dcd2767d5440[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.d997d45e5e56093d6eb3dcd2767d5440.exe
Size

66KB
MD5

d997d45e5e56093d6eb3dcd2767d5440
SHA1

fba8953d4ea91f82514b5c02868fee3156307afe
SHA256

8d7f3bd9e59e45686d2ead6fa4f9c93607b787e62300e00f5c55c9bab2c8e05a
SHA512

4c9ccf683fdf53e08926178ecc30f4f86aabd94c10a430b18bf364a40f4eed8a5224eda612c952c213c7d6f712e143691dc357135f7e4c779bdcf8954ff32760
SSDEEP

1536:QRPSAawT8N/VCu32Kj+p148omfSxTB+J13f:MPpawIN/lG4+pS8oNz63f

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.d997d45e5e56093d6eb3dcd2767d5440.exe

Files

NEAS.d997d45e5e56093d6eb3dcd2767d5440.exe
.exe windows:4 windows x86

a47345ff7c3453ed7129b6ed999e4cd3

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SetConsoleInputExeNameA
FreeResource
GetSystemInfo
K32GetModuleFileNameExA
NeedCurrentDirectoryForExePathA
LoadLibraryExA
SetThreadDescription
ContinueDebugEvent
DuplicateEncryptionInfoFileExt
K32GetModuleBaseNameW

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 51KB - Virtual size: 70KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE