NEAS[.]0895d7520839957114bb71e8e7c1a760[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.0895d7520839957114bb71e8e7c1a760.exe
Size

119KB
MD5

0895d7520839957114bb71e8e7c1a760
SHA1

18ef3eb328571f46508ce063b55754f394e7deb1
SHA256

f469b165c03cbbeb139cd3cad47d727b0c079e4e1d7798dcefc267f8143c4371
SHA512

635aa521748892f5cfbd63af0299fad5111d946947abbb8c3c8d6d39fb1de4e2a9432841103832aa63e5ad79f4758307a8a4ae5850f12f2d9bfd8560741c048e
SSDEEP

1536:scMu754VMqvYBL+dfdtWXA8vTDRdDSoNWQNWbHjwtrEQyhxszU5KcFLtuc00jqZM:sLYAlLWX9vKoEQw3yw9t80jua+g

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.0895d7520839957114bb71e8e7c1a760.exe

Files

NEAS.0895d7520839957114bb71e8e7c1a760.exe
.exe windows:4 windows x86

f4c0dc3308adaa741edc89f3d7003a29

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

BaseDestroyVDMEnvironment
EnumResourceNamesExA
CreateToolhelp32Snapshot
SetProcessAffinityMask
DeleteFileW
RegLoadMUIStringA
SetFileValidData
EnumCalendarInfoExEx
ClosePackageInfo
GetConsoleAliasesLengthW

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 105KB - Virtual size: 126KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE