NEAS[.]778b192e5a4dcab27d38c2e208fee480[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.778b192e5a4dcab27d38c2e208fee480.exe
Size

119KB
MD5

778b192e5a4dcab27d38c2e208fee480
SHA1

afa8bfdc3953d7c316d7434f9d8b3d358f700c76
SHA256

e72caa5717c1ccd4c3eb00376ab06ecd29e89e973fc288f963411b8f80147aa8
SHA512

8008cc0e6bc54b386a8614190692d6f0401ad89f7199e4fd432846f7f0c9f0e963654583f41dd4a2c2c95759eaa15bf998450a1fcae7a9037bc362c0c11f0424
SSDEEP

3072:DsODx6gZ6X2rISkz3xAe2jANxqKlFV67pNn/6kgyf:I6xfAsISkzhn2EqKVefn1

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.778b192e5a4dcab27d38c2e208fee480.exe

Files

NEAS.778b192e5a4dcab27d38c2e208fee480.exe
.exe windows:4 windows x86

542886f53bc1524780ddf5c08d4d6d1e

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetVolumeInformationByHandleW
RegEnumKeyExA
SetInformationJobObject
WaitForThreadpoolIoCallbacks
GetProcessDEPPolicy
DuplicateConsoleHandle
AttachConsole
SleepConditionVariableCS
TzSpecificLocalTimeToSystemTime

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 105KB - Virtual size: 126KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE