NEAS[.]e846fba566debc9c4db3e4a6c5caad90[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.e846fba566debc9c4db3e4a6c5caad90.exe
Size

66KB
MD5

e846fba566debc9c4db3e4a6c5caad90
SHA1

488fe372b8e683e5bc22dd9037054f85a06d4323
SHA256

ae4d7971a4162047f07db4c5f9c3d8445bf85f55188c902f80ee2a127f5574d9
SHA512

6b81fcf1736f5dee5bac0e0f30936fcf8b61707c4d55fc8cc4cf459e2c89941a3952c72af9c9fdc9a74f049d59097ededd0855919506ce7e9e121dcda99a74f6
SSDEEP

1536:S683VhZhXky5fkGbtbg+hoO1pLNc6mL1YsS3XUhnppkdlfA2:ShVPhXk6kGZbJ1pLNVpsS3X2pafA2

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.e846fba566debc9c4db3e4a6c5caad90.exe

Files

NEAS.e846fba566debc9c4db3e4a6c5caad90.exe
.exe windows:4 windows x86

f6c12a876ca4165be23dc24783dc3196

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

FillConsoleOutputCharacterW
OpenWaitableTimerW
StartThreadpoolIo
CreateProcessInternalA
Module32NextW
CreateWaitableTimerA
CancelWaitableTimer
GetFirmwareEnvironmentVariableExW
GetConsoleHardwareState

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 51KB - Virtual size: 70KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE