NEAS[.]0722987bdbcb834974f99eb0646ae9a0[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.0722987bdbcb834974f99eb0646ae9a0.exe
Size

66KB
MD5

0722987bdbcb834974f99eb0646ae9a0
SHA1

a995bc1a2e25412007deceb05b5fd3ae903411cc
SHA256

7f4021bb37013d833498fcbd810336567692fba8c2c60bad40de21d4b57d9f00
SHA512

04c04e5f33d943bab2fad6491fed2b4d3e909a9b2ae12490c1415053d3f847a8e8b441ac80ebc08ba8473f421e26586540623f68f0a062333423b3665e59a474
SSDEEP

1536:dxyX+tm7dJXbHQQt2RCdOpih9sr3kAIXBVnXbKxjf22d33bq1zU5zf:FtYvt2RfWGj7jO0Lso5j

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.0722987bdbcb834974f99eb0646ae9a0.exe

Files

NEAS.0722987bdbcb834974f99eb0646ae9a0.exe
.exe windows:4 windows x86

16d1562a5e6e7d49afcd4f666a6394e0

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LCMapStringA
Heap32First
SetThreadpoolWaitEx
GetSystemPowerStatus
VirtualFreeEx
PrivCopyFileExW
WriteConsoleOutputCharacterA
lstrcpynA
PeekNamedPipe
GlobalFree
SetFirmwareEnvironmentVariableExW

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 51KB - Virtual size: 70KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE