NEAS[.]e9271b718150a19d338559aaad78aaf0[.]exe | Triage

Sharing

General

Target

NEAS.e9271b718150a19d338559aaad78aaf0.exe
Size

119KB
MD5

e9271b718150a19d338559aaad78aaf0
SHA1

45f5031713d78a361ceb675740bab204fcd6e3c7
SHA256

dff90f232025949418bd6873765a44870e9838d6e7230f2c05f31a9188509aa9
SHA512

2a912e176882085920e40389bc3261ebadbcfa8f385bede3aa30cbf8cc3f78d6f5adb88a442b34263095fe9e9d952ed54a2ce093dfe7a5d146098e7e9e1dcd07
SSDEEP

3072:H8v5qGCIeJDhlrM1Q+hSLweYvHLXUnUOS/x:25q3JQnELwfrESx

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.e9271b718150a19d338559aaad78aaf0.exe

Files

NEAS.e9271b718150a19d338559aaad78aaf0.exe
.exe windows:4 windows x86

3847c03590f611a59bd1f28a524a8c80

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SetConsoleMenuClose
GetOverlappedResult
GetMaximumProcessorCount
FindFirstFileTransactedW
TryAcquireSRWLockExclusive
CloseHandle
UnhandledExceptionFilter
GetNumberFormatEx
CommConfigDialogW
EnumSystemLanguageGroupsA

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 105KB - Virtual size: 126KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE