NEAS[.]01baa4c8f88ecbb875b5f892bd2459e0[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.01baa4c8f88ecbb875b5f892bd2459e0.exe
Size

119KB
MD5

01baa4c8f88ecbb875b5f892bd2459e0
SHA1

60e53307c200000a30af46cbff382c9be164509a
SHA256

29d00413e8b9c4ab28c325fe71733d092e3b0eac6a0ca16b9005bbffc186ae50
SHA512

e17f7f8373d486275c16e81fe9680ffb4427ceca6355decbb4a5adc61af11cb642c2ed493ebb010c8aea20fb2653f530d96dbd7d54d71c15b20b628a7cffa9ee
SSDEEP

3072:nwyLGL7p4Z465MYpo0MN0e1YJLxdF1N57cp+4pfvtfV59ioE:riL94ZZ6Yiox31N57d4Nv1g

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.01baa4c8f88ecbb875b5f892bd2459e0.exe

Files

NEAS.01baa4c8f88ecbb875b5f892bd2459e0.exe
.exe windows:4 windows x86

f636e01773252043392baa1090a11457

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

InitializeEnclave
GetConsoleScreenBufferInfoEx
DeleteSynchronizationBarrier
AddDllDirectory
CallNamedPipeW
SetComputerNameExW
QuirkIsEnabledForPackage4Worker
RegSetValueExA
CreateFileW
HeapSetInformation

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 105KB - Virtual size: 126KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE