NEAS[.]024f71da50dfc24cfedbe5ae688f4550[.]exe | Triage

Sharing

General

Target

NEAS.024f71da50dfc24cfedbe5ae688f4550.exe
Size

119KB
MD5

024f71da50dfc24cfedbe5ae688f4550
SHA1

bf3c5fd0c290cb0ad9bda5656166eb4936c31eba
SHA256

c6429f2df85b1fda061f5bc1d6be716edc96ec9e1153367a29c8f85d8958474f
SHA512

73e75089e83f73807ddcb50829abba68bd2fc983cc1fd1072104837b46ba0a5930b340014437d93d60780920eb997d2d07d17dd38ab4473c392d702af56b0f96
SSDEEP

1536:AxAeQJL6GTGiW8+Mcoo+uHZZ44inzEUCG9FvmKe95Z6PI7ivEaf5R+iYINRjiSJn:d7d6GqbMZfu5ZsC4efZ6QbmbRNRGSJQc

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.024f71da50dfc24cfedbe5ae688f4550.exe

Files

NEAS.024f71da50dfc24cfedbe5ae688f4550.exe
.exe windows:4 windows x86

678074ba1e0068f0d2962a7693973b6a

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LocalFree
SetIoRateControlInformationJobObject
IsBadStringPtrA
WerUnregisterAppLocalDump
Wow64GetThreadContext
OpenPrivateNamespaceW
GetLongPathNameW
GetCommTimeouts
EnumDateFormatsExA
FindStringOrdinal

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 105KB - Virtual size: 126KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE