NEAS[.]f2ad1a8b975f1b3f99fa11cf4d31e820[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.f2ad1a8b975f1b3f99fa11cf4d31e820.exe
Size

119KB
MD5

f2ad1a8b975f1b3f99fa11cf4d31e820
SHA1

aa7217db7b131c6aae1f57201c560eb75231ead7
SHA256

92d12cdfbde2363176698f5ebfff68c3c19d1f30b1f7572b3626998d5ca612f2
SHA512

d41da4cf7d5e6389dc81714fe6c3824e6475642284d826d6455ade77de03c24366bd2d26c05479a475731220853dc3207ce6019cff5b0e4deba72e22779bf050
SSDEEP

3072:2ae5c0eBzP5GIrmqVVJdHOXNfqNVFrIDAQOGF3:UCPcgHJFcNfKAZOg

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.f2ad1a8b975f1b3f99fa11cf4d31e820.exe

Files

NEAS.f2ad1a8b975f1b3f99fa11cf4d31e820.exe
.exe windows:4 windows x86

27e4be791985c50e212dc8d1b4d8d6ef

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GlobalFree
SetMessageWaitingIndicator
CreateNamedPipeA
EnableThreadProfiling
SetDefaultDllDirectories
RtlCaptureStackBackTrace
QueryProcessCycleTime
BasepGetComputerNameFromNtPath
CheckTokenCapability

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 105KB - Virtual size: 126KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE