NEAS[.]0e3c3d3032362ccb85a724da1263dca0[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.0e3c3d3032362ccb85a724da1263dca0.exe
Size

119KB
MD5

0e3c3d3032362ccb85a724da1263dca0
SHA1

18f8c1ac9947e8d861fe6c7e46fbfcd6752d5a15
SHA256

3680d01cb74070e28b1eb7aef13258919702e133880d797f07026a3fcc70d39d
SHA512

f1b68e07c244b278d1ff327025d77a3ef8a1b1df0300469090a66b5942152f86cc82c9d425f2d2426ca5b628285609e1401e1e757c04583657f3c7276aacb3b3
SSDEEP

3072:Jx7bPZ7lEIvrgwKZPY9yuEG/3jptmhw2iz07BY:Pr1gwKZg0u//zptmhw2iz0m

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.0e3c3d3032362ccb85a724da1263dca0.exe

Files

NEAS.0e3c3d3032362ccb85a724da1263dca0.exe
.exe windows:4 windows x86

f32ef4b31db917b9eb14b0dc5cbb2392

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

WerRegisterAppLocalDump
DefineDosDeviceW
WerGetFlags
WaitForThreadpoolTimerCallbacks
GetConsoleFontSize
LocalReAlloc
LockResource
OpenFile
EnumResourceTypesW
BasepReportFault
TlsAlloc

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 105KB - Virtual size: 126KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE