NEAS[.]b9b2e70f7133a61f3cf0117ec0197b40[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.b9b2e70f7133a61f3cf0117ec0197b40.exe
Size

119KB
MD5

b9b2e70f7133a61f3cf0117ec0197b40
SHA1

2f5862358c00ed6bd9c3f563cce1f1a49dd7dfa3
SHA256

ff8f99d85f565a761f9934f8176c3a07f72c0119fdba6bb9ad2d04f24c7b269d
SHA512

d2c7b847059a6a4a42caf5d45ecb24f58b1eecd51a4b31efdb3aea588791084f3ca87538d3414adde60027171e5855b4bb4879362ea6531b8a34d5faa2e326cc
SSDEEP

3072:78eHbDuFYfqS2ImRaDJO92Tj+xJV0WKj9/9Z8ladVgD:lb4vS2ImoDD/yuHZz8wdVgD

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.b9b2e70f7133a61f3cf0117ec0197b40.exe

Files

NEAS.b9b2e70f7133a61f3cf0117ec0197b40.exe
.exe windows:4 windows x86

a198549036b1f367e64114e7093430cf

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetLocaleInfoEx
GetComputerNameExA
CreateMailslotW
SetConsolePalette
CompareCalendarDates
BasepCheckWebBladeHashes
BaseUpdateAppcompatCache
DosPathToSessionPathW
FindFirstFileNameW
BasepConstructSxsCreateProcessMessage

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 105KB - Virtual size: 126KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE