NEAS[.]ba3d39785f6a781f89a69af80bedb670[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.ba3d39785f6a781f89a69af80bedb670.exe
Size

66KB
MD5

ba3d39785f6a781f89a69af80bedb670
SHA1

4cd241429f6b340767b18ea3fedf55b498fc2c65
SHA256

2dd5567a4ef8f6c485609d03ea4e5d72445920b892c70532c2c658f236c8a89f
SHA512

a67f30952513c97f181b06b8a84b1092636c968a4604c93d1f38ce61127fa4e143ffef301c33e5cbc4fb3a2e63a6835e345675affd928c9dac56f31f25d22e3b
SSDEEP

1536:kj00KbFDaeJZ4tXX88Lws8hqVqkTl6PmHO+ynm/FVMWCkWqWHTE286hMMy9fk:FlbFOek1XPwsUqVF4PAO+ynwFVfWqWHZ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.ba3d39785f6a781f89a69af80bedb670.exe

Files

NEAS.ba3d39785f6a781f89a69af80bedb670.exe
.exe windows:4 windows x86

ddb535e772bde9c830784f148a5c11c1

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

IdnToUnicode
GetProfileIntA
FindFirstVolumeW
GetSystemWow64DirectoryA
SetLastConsoleEventActive
AddAtomA
CreateHardLinkTransactedA
GetNamedPipeServerProcessId
GetNamedPipeInfo
GetDefaultCommConfigA

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 51KB - Virtual size: 70KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE