NEAS[.]a4003f547acddd85caa0b29711d10ca0[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.a4003f547acddd85caa0b29711d10ca0.exe
Size

119KB
MD5

a4003f547acddd85caa0b29711d10ca0
SHA1

5e960a707b1fd5b5e989f2509fccf4768e70657a
SHA256

b11df9b78d3b64938ef84fb89d2b82514551158aee284b126e707925bc14a6cd
SHA512

ef09ec5cf3c170138b233ae81a8d564515a4c5a47ee7757f24423e2033efe69a82c3a4a316b059bf029d1eae5ae0003d355a0647eaf382c9c2d2335f72d7922c
SSDEEP

3072:Q/jldNtUUHARhFGp7vdtZYr/DGg8kQzWe/RvoiX0G/NtK:QxZUUHAPQp7VtZabrgpvoiX9lw

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.a4003f547acddd85caa0b29711d10ca0.exe

Files

NEAS.a4003f547acddd85caa0b29711d10ca0.exe
.exe windows:4 windows x86

780610a4d3e365e055716c76dfd90cc7

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetQueuedCompletionStatusEx
_lcreat
CreateThreadpoolCleanupGroup
SetNamedPipeHandleState
FindResourceExA
BaseDllReadWriteIniFile
SetWaitableTimerEx
SetDefaultDllDirectories
InterlockedExchange
EnumSystemCodePagesA

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 105KB - Virtual size: 126KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE