NEAS[.]d3e9769c8582d64b7f25c5ba2b0f67c0[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.d3e9769c8582d64b7f25c5ba2b0f67c0.exe
Size

119KB
MD5

d3e9769c8582d64b7f25c5ba2b0f67c0
SHA1

0e38fcba1681a27adf8074d947c76763dad8996f
SHA256

e40fa68d332a9736acbe7b0214be0334671dd0b434baf8c65c2611b2ce220e94
SHA512

387b1034928117f3e92e28275ba3073ea0176386e6bafa7893277b7c52b3531e17f8f4dd85fc01c21e6eb2944f32f9c41b7c43dd2838136cee8e9deae577db9d
SSDEEP

3072:5biJXtmxJKDh2f/nGezCL3BXZNnDDIZGv:8h4xJKYfPG2W3NIZGv

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.d3e9769c8582d64b7f25c5ba2b0f67c0.exe

Files

NEAS.d3e9769c8582d64b7f25c5ba2b0f67c0.exe
.exe windows:4 windows x86

10fcb23c08b499a48f73e56343ac2b01

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetSystemWindowsDirectoryW
SetThreadpoolWait
QuirkGetData2Worker
SetThreadIdealProcessor
GetSystemTimePreciseAsFileTime
GetConsoleInputWaitHandle
GetPrivateProfileStringW
TlsAlloc
GetNumberOfConsoleInputEvents

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 105KB - Virtual size: 126KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE