NEAS[.]dab1783148da636917624b1b8f13fb40[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.dab1783148da636917624b1b8f13fb40.exe
Size

66KB
MD5

dab1783148da636917624b1b8f13fb40
SHA1

d7d34c4f24c5122b491913c02637b02fc6cd091c
SHA256

274352cd069a53a73c1a650b036b4d98afcd25ab1218d17ee29b0d8f54e6c5ec
SHA512

c20c9508c18df9754d09cd5b80af4d4e87897a401401be3564e528bd4260d30a68128ce411913ad7f3f846b08a54e5a9f1af736372438e9b3db0a3ad1de59767
SSDEEP

1536:aGZQhdpCnX7TMaCP0xvTtlH4NeLPefF4WhM:hZQhd8XM2bQkiThM

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.dab1783148da636917624b1b8f13fb40.exe

Files

NEAS.dab1783148da636917624b1b8f13fb40.exe
.exe windows:4 windows x86

54c9a91bf8143f2307ad320368c26cbd

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetThreadPriorityBoost
GetVolumePathNameA
GetSystemDefaultLCID
GetStringScripts
GetFileMUIInfo
Wow64Transition
ChangeTimerQueueTimer
SetFilePointerEx
SetProcessShutdownParameters
SetVolumeMountPointW

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 51KB - Virtual size: 70KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE