NEAS[.]b8542103ae149ec63fa053509ad40820[.]exe | Triage

Sharing

General

Target

NEAS.b8542103ae149ec63fa053509ad40820.exe
Size

119KB
MD5

b8542103ae149ec63fa053509ad40820
SHA1

d0ac4db437b48367d5e423d8f6a8e85b2c30b3f2
SHA256

725997e22057ed0899da2a6ddcf6c1c6d4ca07e967717c91ee588793448e100a
SHA512

fc136c9c0ad7618607bc15fbc73ac0ae9ef862e351116f1cda18a85438826e4d12be4ac5f110e53efe791f34ff250f752b009739bc7c2adeda2795aafb6b0af0
SSDEEP

3072:WuSRxm8ndFQtEnnsNnLaSQOKM289COcqyezt9QzEM:WuSRxddFrsRQNq96qyKQ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.b8542103ae149ec63fa053509ad40820.exe

Files

NEAS.b8542103ae149ec63fa053509ad40820.exe
.exe windows:4 windows x86

32a3841ceccbe5d95cf14a544cd38470

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LCMapStringW
GetTimeFormatAWorker
DosPathToSessionPathA
UnlockFile
CreateActCtxW
VirtualProtect
RegGetKeySecurity
_lread
FatalExit
GetTapeStatus
HeapValidate
GetDiskFreeSpaceExW

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 105KB - Virtual size: 126KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE