NEAS[.]fe1c529d8071b223f5c2634c8abfc490[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.fe1c529d8071b223f5c2634c8abfc490.exe
Size

119KB
MD5

fe1c529d8071b223f5c2634c8abfc490
SHA1

038821cb55f8c75cf98139cf685197e3fe15aa19
SHA256

0725faa8345e4d05ffaebb9d80acd0577ed01def9ff9c8579f9f48d06695daa5
SHA512

2d9bd996269c4e51ba7e89f76920e9980efdce158bb6b7790785eb3536e912effb53c2fc2da5f513d9002a4e71d820fb67312cc0333327fd99f51b32655d86fb
SSDEEP

3072:6Sx2AkZARPRcAc8ZXBGy/JkUywmCnG2VLpnqwF:6YkwKXAXBvGPhCnN5qy

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.fe1c529d8071b223f5c2634c8abfc490.exe

Files

NEAS.fe1c529d8071b223f5c2634c8abfc490.exe
.exe windows:4 windows x86

497b6e7ccb706882aa92bb9af5358101

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetLogicalDriveStringsW
HeapValidate
SetLastConsoleEventActive
SetNamedPipeAttribute
SetThreadpoolTimer
PowerCreateRequest
SetCurrentConsoleFontEx
ConvertThreadToFiber
ReleaseActCtxWorker
GetConsoleCommandHistoryLengthA

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 105KB - Virtual size: 126KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE