NEAS[.]12e88e5d6aaa694a20cb6ddcf0762920[.]exe | Triage

Sharing

General

Target

NEAS.12e88e5d6aaa694a20cb6ddcf0762920.exe
Size

66KB
MD5

12e88e5d6aaa694a20cb6ddcf0762920
SHA1

8cfbbe6e1b278f94f6961623e09163cdd844c118
SHA256

fbe3975994887c08f741819ff533265eac40b6197b4a2b3c129713ada4dac437
SHA512

0fe24a419a90f0588fc49ea58cb01350b9073d4e42e9f4a3902bad841aacfd87ea1c59b449fbc1c853323ec140c2b272d8e3a800fdb212e6684205e079373728
SSDEEP

1536:5Vmw+G35IlhkW/8OLA8lWcY/+79dem+j4m7yK:bmwLuksZ9de0kx

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.12e88e5d6aaa694a20cb6ddcf0762920.exe

Files

NEAS.12e88e5d6aaa694a20cb6ddcf0762920.exe
.exe windows:4 windows x86

467f95ebe0f174c82851839c8e990a2e

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

WaitForDebugEventEx
lstrcpyA
GetProcAddress
SetThreadIdealProcessor
GetUserDefaultLocaleName
AddVectoredExceptionHandler
GetLongPathNameTransactedA
MoveFileWithProgressA
TryAcquireSRWLockShared
SetFileTime

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 51KB - Virtual size: 70KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE