NEAS[.]2b684f6f077f9bd146822a982ad83690[.]exe | Triage

Sharing

General

Target

NEAS.2b684f6f077f9bd146822a982ad83690.exe
Size

119KB
MD5

2b684f6f077f9bd146822a982ad83690
SHA1

9a2f485b0d9288042ccead8fc5f7c3a02fff38b5
SHA256

88a07b46bd2ec98ca7ce694946b1e1b96fa69c8ea6251b8e23362590bc910564
SHA512

db9ec563a0752dc9833ac75be87c5e4f41d57d0b7687cb172e1902cf08b7098c5e48f3f56a2489b2bab2886902781ec3ab00ff0d3d51f156d92b108c17807376
SSDEEP

1536:pS55rsva9w4xCRM5h4SCwqisBaDpmXsYfyRn7+kiW7BhiDjtHGWFPPEvKQNTxzbs:wfUAHHpqisBOgXcR7+ktBK5mmDQNVzbs

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.2b684f6f077f9bd146822a982ad83690.exe

Files

NEAS.2b684f6f077f9bd146822a982ad83690.exe
.exe windows:4 windows x86

2effe8f6d03e2edd0e079fc42717dfcd

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

IsValidLocale
QueryDosDeviceW
GetModuleHandleW
GetDiskFreeSpaceExA
NotifyUILanguageChange
ExpungeConsoleCommandHistoryW
SetFileAttributesTransactedW
DeleteVolumeMountPointW
SetConsoleNumberOfCommandsA

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 105KB - Virtual size: 126KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE