NEAS[.]8df1df2b1da44b507f85fc1b3d7f04e0[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.8df1df2b1da44b507f85fc1b3d7f04e0.exe
Size

66KB
MD5

8df1df2b1da44b507f85fc1b3d7f04e0
SHA1

3888191fe7566f5d6b14017e4e9c077c71baa200
SHA256

35c4f19b6ceff8c121bfc65de5301728d3d417336bfc3046c0ba1a54803942cb
SHA512

749950e248dbef203708ac50ed9e6d67822f12a3ae0f2ed334766e42c740e69acca5692945901d1d66c8a033d2f0d3622bed2f2a461d034fa03dc116f01b4524
SSDEEP

1536:VN4BpQdkvnht45BTN0nTjs4hrm6AijRm/6UeHJRdQl8uygh9ZpzJqSz:n3kPhCBSPhuil1pHJXg7Z9JZz

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.8df1df2b1da44b507f85fc1b3d7f04e0.exe

Files

NEAS.8df1df2b1da44b507f85fc1b3d7f04e0.exe
.exe windows:4 windows x86

4e305df1cd70b1c7dfcb0f01b13f21a0

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

OpenProcess
CreateEventW
SetConsoleCursorPosition
AreFileApisANSI
GetFileType
EnumDateFormatsExA
GetStagedPackagePathByFullName
K32GetDeviceDriverFileNameA
SetEnvironmentVariableW
WaitNamedPipeA

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 51KB - Virtual size: 70KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE