NEAS[.]b0e3a693985b94c02528c29792733820[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.b0e3a693985b94c02528c29792733820.exe
Size

119KB
MD5

b0e3a693985b94c02528c29792733820
SHA1

5c5a21d5ee8c5242f1115dd939c2be4d98c436f6
SHA256

68737410d11e95533246f770ae62e756589951a3d811129cba6e448c7b7e3031
SHA512

7b36c16bc5064ed5b4b96335c2f3f4d816c9d5cda9d66e8454d1637b0a3b3212bf2348ed02e0dcc149f026859a05a6f3ff3ec5a0f43813c6a01aa2344db1e1fe
SSDEEP

3072:rr/dRHFmmmRAg9l7AoQiD6na4VZNhbP7qqcb3MvbX9pUV5:rxRHFmmm2g91AviDUL/6qS8vDW

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.b0e3a693985b94c02528c29792733820.exe

Files

NEAS.b0e3a693985b94c02528c29792733820.exe
.exe windows:4 windows x86

e0c78cba9d8d9c3bdeadeab5d818e0e2

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ReadConsoleOutputCharacterW
TzSpecificLocalTimeToSystemTimeEx
lstrcat
ReleaseSemaphore
_hread
BasepGetComputerNameFromNtPath
SetDefaultDllDirectories
GetCompressedFileSizeA
HeapAlloc
DeleteSynchronizationBarrier

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 105KB - Virtual size: 126KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE