NEAS[.]fea7b86bfb24cdabf14433ca875e3690[.]exe | Triage

Sharing

General

Target

NEAS.fea7b86bfb24cdabf14433ca875e3690.exe
Size

119KB
MD5

fea7b86bfb24cdabf14433ca875e3690
SHA1

dd5548347002e1806d6731567c462dc6ecbddc77
SHA256

aeb7a7b37bc5cd787ba7448425a318f37bfa6a7c0a0368eea6ec6a854355f973
SHA512

93e6c1aa55c44c74ae4786d48224a695eb1e5d10c878dd76e5510390861ddf6190862fe7203a66a6574794e0e2677f645f69c9598b24af5afed46801f556874b
SSDEEP

3072:EJpWcTJadfdMA07AatHfTQEIjAUuD8KaISczGP/:SccU07l13UugKaIpzGP/

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.fea7b86bfb24cdabf14433ca875e3690.exe

Files

NEAS.fea7b86bfb24cdabf14433ca875e3690.exe
.exe windows:4 windows x86

a7b006d44e514541e5bfef10cc0a54bb

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

InterlockedCompareExchange
GetVDMCurrentDirectories
GetShortPathNameA
FlsAlloc
GetVolumeInformationA
OpenConsoleWStub
Wow64GetThreadContext
RegisterConsoleVDM
PulseEvent
CmdBatNotification

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 105KB - Virtual size: 126KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE