NEAS[.]831191e0e3a8ac19529ab6ccbd9a39d0[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.831191e0e3a8ac19529ab6ccbd9a39d0.exe
Size

66KB
MD5

831191e0e3a8ac19529ab6ccbd9a39d0
SHA1

0e6d778dcf5ec2d108f4257cf9b594a96bc096fb
SHA256

d15abb3faa58e1a94e8cf5cb8486671647e0e3500b78488aedba33fb321adf63
SHA512

26bd173133c674fc346a1d32828cb569fb11dcd5aa1ebd38bccce3bef2833177c885bda1216ad5621ecb768144682f63240dfcf965412ab7f3081be86876c237
SSDEEP

1536:qnEKkKP88FqXLiewLVuECYRqIc6nBzJiFcKs:6FoXLMqt6nOcKs

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.831191e0e3a8ac19529ab6ccbd9a39d0.exe

Files

NEAS.831191e0e3a8ac19529ab6ccbd9a39d0.exe
.exe windows:4 windows x86

d60f3ccde4f5407359144ebbfc0e0fa3

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

BackupSeek
BasepGetComputerNameFromNtPath
GetVolumeInformationA
SetConsoleHistoryInfo
DeleteFileW
SetConsoleNlsMode
SetCriticalSectionSpinCount
SetFirmwareEnvironmentVariableW
ChangeTimerQueueTimer

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 51KB - Virtual size: 70KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE