NEAS[.]b0bfbef4c70260f2658a8cc89a271490[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.b0bfbef4c70260f2658a8cc89a271490.exe
Size

119KB
MD5

b0bfbef4c70260f2658a8cc89a271490
SHA1

9cd070160de8d2874fbc10bd75642aa8bea7290d
SHA256

321e90ae97f2b9b6993c13702d059b7fdf75b617a6c45b8db8483e701458aa5a
SHA512

477201b29cc2a9e70a3b7ce169a6c1276d97d3f6741d6c5f9c5168ba10ea12a9031dadc3d95a40c907d282397922c1a6a2188e4850bda1a34af25fe9174c0615
SSDEEP

3072:nb3EIebI3f4CC5LWqAUbltvaibl/WIPjCdvZ6yz:bjebIvUSUbljW4jCdvQW

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.b0bfbef4c70260f2658a8cc89a271490.exe

Files

NEAS.b0bfbef4c70260f2658a8cc89a271490.exe
.exe windows:4 windows x86

7f8bbb29cf1f729abb579f73c069f6b8

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

EnumUILanguagesW
CreateWaitableTimerA
GetModuleHandleExA
CreateThreadpoolWait
RestoreLastError
GetCommConfig
GetModuleHandleExA
FlushFileBuffers
GetConsoleScreenBufferInfoEx
Wow64GetThreadSelectorEntry

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 105KB - Virtual size: 126KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE