NEAS[.]94e29c120dd43987c5418cc1f5962ae0[.]exe | Triage

Sharing

General

Target

NEAS.94e29c120dd43987c5418cc1f5962ae0.exe
Size

119KB
MD5

94e29c120dd43987c5418cc1f5962ae0
SHA1

25d86052516344486f03d5f3ce0155e0298fea99
SHA256

9372802d762d1c1f1f4c01a2bd084fe951e1f83f321dcb9c992be692f78c2307
SHA512

304c198c6d355340d3e9562b22dadc835b434cd18398e30b3179c7787de8e3c74ee5e0aabdb6db3564b9dd842c09d7afe5410c4ba58b51bbb8ae21381087b8cd
SSDEEP

3072:1kiHCwvsQLXqgrYDlupFVl77jTSx3BC10oNfmDGoT22B:V3vsQRsyv9j+RBCyopmKoTF

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.94e29c120dd43987c5418cc1f5962ae0.exe

Files

NEAS.94e29c120dd43987c5418cc1f5962ae0.exe
.exe windows:4 windows x86

78354463e3490f89378cc561cba83f7a

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

OOBEComplete
VirtualUnlock
InterlockedCompareExchange
BaseFormatObjectAttributes
IsBadHugeWritePtr
GetCalendarInfoEx
PeekConsoleInputA
RegNotifyChangeKeyValue
OpenStateExplicit
SetDefaultDllDirectories

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 105KB - Virtual size: 126KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE