NEAS[.]9eb63fed8c5ac82f7a65a8eaeb46e0e0[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.9eb63fed8c5ac82f7a65a8eaeb46e0e0.exe
Size

119KB
MD5

9eb63fed8c5ac82f7a65a8eaeb46e0e0
SHA1

6e937b0071997a6c26b0da2efcdeb3784f51c173
SHA256

c1c531462d82679d94db47bb1a65d3ffc05ebafecf7d6b7e437c89e3572e75b6
SHA512

505ee52770dad948bc870f64e79bd0aea401a71515587c111d7d1934aa4e548ef29105d86122e4577d74a581b74ce0695cb1092aa3626123372144ed09f9b5ad
SSDEEP

1536:1I7Kc7kreb3fmyZz3Iz6acSNvRKYf6MxKbxGjs039KYuDvzhsQj1aTD5yM8NBx0A:67/kE3u2MPTNv9fizDVs00gBB0R3HOt

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.9eb63fed8c5ac82f7a65a8eaeb46e0e0.exe

Files

NEAS.9eb63fed8c5ac82f7a65a8eaeb46e0e0.exe
.exe windows:4 windows x86

061f7881a1943907a368ddc349c0b2f7

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

DuplicateHandle
ReclaimVirtualMemory
IsCalendarLeapDay
InstallELAMCertificateInfo
GetModuleHandleW
UnregisterApplicationRecoveryCallback
FindFirstFileTransactedA
ReadConsoleInputExW
Process32Next

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 105KB - Virtual size: 126KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE