NEAS[.]85e7c423821017a659bcce98f325dc50[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.85e7c423821017a659bcce98f325dc50.exe
Size

66KB
MD5

85e7c423821017a659bcce98f325dc50
SHA1

f7e37f79ae56021c5f321a8756197c07892b280b
SHA256

238fe2f6951b5a0b66693d93aafaf41148be64347331b52e987856b432d2d1f7
SHA512

8b8ec9d5dcc384ccec5326a451f68a65a7dac26ec077a4d7c515b3e7aa24b4ad04b2d3400398c6addb455a6a4465ba15edb9646616d5d7e94ee700f7ab14a38d
SSDEEP

1536:jgNKj1lCn+wJF7Djwt54geXpI4rzBN1Y7FAqg/y5crFJuhW:jcKj1k+wDD4UvfBN1E2qg2Kuk

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.85e7c423821017a659bcce98f325dc50.exe

Files

NEAS.85e7c423821017a659bcce98f325dc50.exe
.exe windows:4 windows x86

7ab74623d231203cd4953affcaa2f3d3

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

IsNLSDefinedString
InstallELAMCertificateInfo
GetCurrentPackageFullName
BaseFormatObjectAttributes
FreeConsole
GetDynamicTimeZoneInformation
CreateSemaphoreExW
GetConsoleCommandHistoryLengthW
GlobalSize

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 51KB - Virtual size: 70KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE