NEAS[.]34b3bd296635f45512c71010ca0902e0[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.34b3bd296635f45512c71010ca0902e0.exe
Size

119KB
MD5

34b3bd296635f45512c71010ca0902e0
SHA1

32c6f34496ef428cbd2ec65318f3cb45a24931ca
SHA256

0332541257b539d78a421e3eb833065920169600dfce963b01fcf2f0bc47b4f2
SHA512

7465b4134d3ea9028171011d1a1cb89e499de67177f7bb73a5059dcaa2f52269683218e479e2ff1d535f3c9cf893f7b9b4d201a52bb4fb345e568d47383fb576
SSDEEP

1536:DVzFyyc84RLelSqwCWdYmTO/hA57h7lPfW9rRBLlcq+orO4GlsQCnlY7SUuumOGO:DtAyb4RqlgCWdYYxuBeJsvia5AsLmiVu

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.34b3bd296635f45512c71010ca0902e0.exe

Files

NEAS.34b3bd296635f45512c71010ca0902e0.exe
.exe windows:4 windows x86

bbe8e09500240f5776116627e3009e10

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateWaitableTimerW
DeleteFileTransactedW
K32EnumPageFilesA
SetConsoleScreenBufferInfoEx
PackageNameAndPublisherIdFromFamilyName
SetThreadpoolStackInformation
SetConsolePalette
FindActCtxSectionStringWWorker

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 105KB - Virtual size: 126KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE