NEAS[.]1245f10d9ec74e1e9c6b06e90a31bfa0[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.1245f10d9ec74e1e9c6b06e90a31bfa0.exe
Size

119KB
MD5

1245f10d9ec74e1e9c6b06e90a31bfa0
SHA1

9130564df28e0f7fa7bbe419777fa8dbb5738b41
SHA256

39a7d3026a57c4caea73919af10bc4ff2937dc8bfc5665e1a95f8204317cd2bb
SHA512

0dbbd49a911934fc827b47b9ad3b68ffd590a23cf535f26338276478c26a10e00383e5b0f43ff1eda9aa62580a2edbe82b2d248a76a80cb74d0db4939560423b
SSDEEP

1536:PNR3b3nQumC9NkT4ZAHYAcEAHNxiTKPL1ZEs+iDFYTiJzgMzFYmAq1jU5B63xQ3W:PN1bXQ7IlZtzDBZEs+kC5MzJwR7LE

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.1245f10d9ec74e1e9c6b06e90a31bfa0.exe

Files

NEAS.1245f10d9ec74e1e9c6b06e90a31bfa0.exe
.exe windows:4 windows x86

4c408a0ca5a46612dccab4a2411becda

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

K32EnumPageFilesA
IsBadReadPtr
BasepReportFault
PssWalkMarkerGetPosition
SetTermsrvAppInstallMode
LCMapStringEx
DecodeSystemPointer
DebugActiveProcessStop
EnableThreadProfiling
BasepCheckWebBladeHashes

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 105KB - Virtual size: 126KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE