NEAS[.]063ea8a66f144c0b5029b1298bcb0380[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.063ea8a66f144c0b5029b1298bcb0380.exe
Size

119KB
MD5

063ea8a66f144c0b5029b1298bcb0380
SHA1

ed12332bec6ae511800f9e6c5356b57c36f40559
SHA256

89bdc7eab0f339fd6ad09fcf80fd81938e1a5b7ec025cadad243336a9db75050
SHA512

35ac1d2c7c2162fc2306db2a90d4b6ca524ee6e1d8c790e54de95de3cf268fa7555731f6190c92eee7441153351b304c2dde575ad7b698ee0348325c95dfca8a
SSDEEP

3072:mRvs/L0JSZpcz7nx/9CeSisGTezo4EWKoQ:m51SZGx/9wiIgWK9

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.063ea8a66f144c0b5029b1298bcb0380.exe

Files

NEAS.063ea8a66f144c0b5029b1298bcb0380.exe
.exe windows:4 windows x86

98e447126b7a01d16e8389649d36d34d

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetEraNameCountedString
GlobalFix
_lread
PowerClearRequest
CreateThreadpoolCleanupGroup
SleepConditionVariableCS
Wow64GetThreadSelectorEntry
SetEnvironmentVariableA
EnumSystemLanguageGroupsA
NlsUpdateLocale

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 105KB - Virtual size: 126KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE