NEAS[.]831227ad42ed1f2fa3015042f0057330[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.831227ad42ed1f2fa3015042f0057330.exe
Size

119KB
MD5

831227ad42ed1f2fa3015042f0057330
SHA1

15c00aeb52767d62cc2d3f0b72465147f0859bd5
SHA256

3f16b33a2acf54a98b5cecc980ea3a2cb7042106bcd2f71699594d30aec1fa6d
SHA512

52a25747fd9e7290dfbaeb11aa21a2537c607dac53b780741b68a75fa53d078992bd0d03f89098ce9dcf1cb314a849a18a9ee5c26d8d6403c3d65a86faf10c6a
SSDEEP

3072:DWDI4kABRdVs91XbvrHnRfXBcaF9OLeJZ5X:eIVABRdV+1XbrHR/BN9hZ5X

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.831227ad42ed1f2fa3015042f0057330.exe

Files

NEAS.831227ad42ed1f2fa3015042f0057330.exe
.exe windows:4 windows x86

4a8c613df8e0ab10450a79052820b561

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

WaitCommEvent
GetModuleHandleExA
SetThreadSelectedCpuSets
GetTapeStatus
WerRegisterFile
GetStartupInfoA
GetSystemPowerStatus
SetThreadpoolTimerEx
K32GetDeviceDriverFileNameA
GetConsoleAliasesLengthW

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 105KB - Virtual size: 126KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE