NEAS[.]85fbecaa2b04c07a225586b1390829a0[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.85fbecaa2b04c07a225586b1390829a0.exe
Size

119KB
MD5

85fbecaa2b04c07a225586b1390829a0
SHA1

60becf7dd9756842e311ccda1dc5ea2646f618fd
SHA256

0797a563fa84c159e28ed529016d2b29e47705c9297032dceb833ad195769854
SHA512

e221ed5cf009fc33295031a1f5965ef0df62eb03837c6e9c541bbff703e14e13aab66979eb9ead7d438a3ce2f09c1af3e54021d56402be66a31f87292bc93c6e
SSDEEP

1536:GGqqN9TtLAhSl5ATAwmMGqOWQZqbM7xilFmZThx/9SBzIE+5ECRYDwJl1qZQNb/l:Gqpj5Qa2+qwEFmdhZsMzNr0vzXuGE

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.85fbecaa2b04c07a225586b1390829a0.exe

Files

NEAS.85fbecaa2b04c07a225586b1390829a0.exe
.exe windows:4 windows x86

994e155070afb5502154cf92de6635b7

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetNumaNodeProcessorMaskEx
SuspendThread
GetConsoleTitleW
FreeConsole
LockFileEx
BasepAllocateActivationContextActivationBlock
Wow64GetThreadContext
HeapAlloc
RemoveSecureMemoryCacheCallback
DefineDosDeviceW

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 105KB - Virtual size: 126KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE