NEAS[.]26ba3819613e6cbaeb1400f56779db60[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.26ba3819613e6cbaeb1400f56779db60.exe
Size

119KB
MD5

26ba3819613e6cbaeb1400f56779db60
SHA1

3823e794ff656a33e92b65af5049ad5ba100a655
SHA256

ae61c814b25e6de944c7f490ded667fbf0beb39848808d954036aaada8cbb205
SHA512

77099547a161d97d78718d27deb4420f42dbea23b561384c2b5abb7e00de93178cf80e29f14624928f30b6eb9378fb328844513eb55413314d90b485e5b8b95d
SSDEEP

1536:GSG+OLDUZIo8KQmLwGx/rurg+ckUk3GdNkWdFHM9rJni6lCVMhOYCAkitwA4TLWI:Lac/ruP/G7k4m9g6AMhpkieaYoYPky

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.26ba3819613e6cbaeb1400f56779db60.exe

Files

NEAS.26ba3819613e6cbaeb1400f56779db60.exe
.exe windows:4 windows x86

0bf99ed39762a4869b4f36d9d8fd0305

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

EnumCalendarInfoA
GetLogicalProcessorInformation
InitializeSRWLock
BaseWriteErrorElevationRequiredEvent
CreateJobSet
GetEnvironmentVariableA
PeekNamedPipe
CreateThreadpoolWork
FindNextStreamW
GetActiveProcessorCount

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 105KB - Virtual size: 126KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE