NEAS[.]e1ff9172b7550805b854b95203aaa4b0[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.e1ff9172b7550805b854b95203aaa4b0.exe
Size

66KB
MD5

e1ff9172b7550805b854b95203aaa4b0
SHA1

4814b9b30d51ede2895329369548d661b287fe85
SHA256

a1ce931587c3acf4dde7164287655949c7ada4f581fbffde94f5df0b06cc0134
SHA512

930e3f855df7dbb1080961e2b7376fe7ed630ceb68f367e80de2c3a210060d8f97c2a87c0fa8a480dbc9d92205b0002910c50368def7b277af65ea9f3232d38d
SSDEEP

768:cjmxrejSLNUE+Dx/9AOQQ2YmIuxO5wypuQM0n5l+tI3//JYM3P07Fu4WzljDv51W:cxyLVVNoHhMml+KpYUOFu4bb9Qs/F26

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.e1ff9172b7550805b854b95203aaa4b0.exe

Files

NEAS.e1ff9172b7550805b854b95203aaa4b0.exe
.exe windows:4 windows x86

c23a354e41b3765d94ab67248d7e31a2

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

EnumDateFormatsExA
GetThreadGroupAffinity
WerRegisterFile
SetConsoleTitleA
lstrcatW
CreateDirectoryW
AddLocalAlternateComputerNameA
StartThreadpoolIo
HeapValidate
FindNextFileNameW
WritePrivateProfileSectionA

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 51KB - Virtual size: 70KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE