NEAS[.]0c6e43cfc01055a87e0390af693b4490[.]exe | Triage

Sharing

General

Target

NEAS.0c6e43cfc01055a87e0390af693b4490.exe
Size

119KB
MD5

0c6e43cfc01055a87e0390af693b4490
SHA1

3385a5037a34edf6448f5b380377587189de4023
SHA256

aacc2b08891c1b1a784fb031656ddcb2e53b9caa0e08ee9ffebae3b596198f5a
SHA512

e2d38443e14066cbfcacb11e30d906cc5bd30d9724cf3ba7a8f997c64bdf21cb317f85f328110aada45da23563594a45cdf14498c4354a7429ae3cac7ce01a32
SSDEEP

3072:t6k7Alz3j+J7BC8+RJsgoA3FOBH6kk2MGM1RTRKxO:tF703yJFJ+RzoI0Bah2UNK4

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.0c6e43cfc01055a87e0390af693b4490.exe

Files

NEAS.0c6e43cfc01055a87e0390af693b4490.exe
.exe windows:4 windows x86

ff390c3073f92ace4621e449df371290

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateEventA
RegGetValueW
UnregisterBadMemoryNotification
CreateEnclave
ReadConsoleInputExA
SetProcessPreferredUILanguages
GetEnabledXStateFeatures
SetFileShortNameA
CopyContext
GetSystemDefaultLocaleName

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 105KB - Virtual size: 126KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE