NEAS[.]221bee8e101546465b464efa8e6bee60[.]exe | Triage

Sharing

General

Target

NEAS.221bee8e101546465b464efa8e6bee60.exe
Size

119KB
MD5

221bee8e101546465b464efa8e6bee60
SHA1

759a40a0c19657053b3095e416c47db21816ad17
SHA256

dad8a775fab97ec7fff7fb8c60ccbcff7c6884d85ac6069d0a5bae7c268ec3e6
SHA512

5839d64489611c64b2d0420f4b829404afb00908c82156cbe44f846ff84d1353d134f290628d001739453871010269c6b5fcdd2abcd45530f3d9530d219b0e00
SSDEEP

3072:fqyq82Nqilo8AGrlhf+cPZO2hQtQxvvc/ule3cAU:y1PNqUa8ZNQt52ssR

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.221bee8e101546465b464efa8e6bee60.exe

Files

NEAS.221bee8e101546465b464efa8e6bee60.exe
.exe windows:4 windows x86

26fff6a8098341efea8f7fd2f6233017

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GlobalFix
ApplicationRecoveryInProgress
GetFullPathNameTransactedW
CloseProfileUserMapping
GetConsoleCommandHistoryA
lstrlen
BasepReportFault
GetFirmwareEnvironmentVariableA
GetCurrentThreadStackLimits

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 105KB - Virtual size: 126KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE