NEAS[.]c26b20486d9b4b2f2e7c846011f9b020[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.c26b20486d9b4b2f2e7c846011f9b020.exe
Size

119KB
MD5

c26b20486d9b4b2f2e7c846011f9b020
SHA1

17843d53b769a6424aeae670ca8c36bdc464ecc2
SHA256

2997800e1b32d8c63f792953075e9a0ee132f264167a67d2448a44797d5a7de7
SHA512

1e59fcdfc1f5ca32381fd2a0b1ef11951ff2c92884ba91443c498a7557c1fc93d053c9593c86ce37d2ae27a0ae2729939a560d2de29cedbdc454822570e28082
SSDEEP

3072:a67jAC4qHR1ibXbz7W5HlUkWmtqMV2LWF/T+:aQjAC4qx1i7bXWhlUzH1LY/T+

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.c26b20486d9b4b2f2e7c846011f9b020.exe

Files

NEAS.c26b20486d9b4b2f2e7c846011f9b020.exe
.exe windows:4 windows x86

3c4723f2194884acf4b6a92e310ced64

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

AcquireSRWLockShared
GetCalendarInfoW
InitializeSListHead
BaseReadAppCompatDataForProcessWorker
CreateFileMappingFromApp
SetThreadpoolThreadMinimum
QueryThreadpoolStackInformation
SetFileCompletionNotificationModes

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 105KB - Virtual size: 126KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE