NEAS[.]b957990b7bad403f07800fc1d48184d0[.]exe | Triage

Sharing

General

Target

NEAS.b957990b7bad403f07800fc1d48184d0.exe
Size

119KB
MD5

b957990b7bad403f07800fc1d48184d0
SHA1

5ff4eb8abe0fcb5eda9c905a8b444de7bfcf5cfa
SHA256

d5fd874d7873ba58451217b0783b902399ddb76c6ad84f6cc9ddffec1c66278b
SHA512

c5b3c2c9891b62fe7a49de0a3240ab415fbd57ff371699313fd5054b0cebe4471a23aea6f799f41ee06a14710baf197cd968783e77d3e93d27a2ec77fd25f48b
SSDEEP

3072:fyuvuuv/Msv+uxCrfaISUJapNGjbMEQRAaBQJzX7O:fMEpC+F1cjbsiaGzX6

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.b957990b7bad403f07800fc1d48184d0.exe

Files

NEAS.b957990b7bad403f07800fc1d48184d0.exe
.exe windows:4 windows x86

eeccafae1df9abdb4a4d0342d8196d87

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

BaseFormatObjectAttributes
LocalFileTimeToFileTime
SetConsoleInputExeNameA
EncodeSystemPointer
GetSystemDirectoryW
ActivateActCtx
SetComputerNameExW
GetCurrentConsoleFont
CreateJobObjectW
GetEnvironmentStringsW

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 105KB - Virtual size: 126KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE