NEAS[.]39d1e26484920a1bf807957ec9413df0[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.39d1e26484920a1bf807957ec9413df0.exe
Size

119KB
MD5

39d1e26484920a1bf807957ec9413df0
SHA1

19256d71d9f8870f5b24575b40562b1330f21ff2
SHA256

a6b0a45eb7bd619793fc491f9ed86d04b5169d21fbd7c00c3767f550c0d743e8
SHA512

6d69e1cfed8b2476e9f3bdc27363ae678c85b7a3e6f9a2f89cf087b34ad374443da051f54b8f1dcec56376dfbdae75f9d31a8b9cb5bbfa40d4a8669df2d4d55f
SSDEEP

3072:SLcU749zVehLGoWd+irYq41u4my1c5aAmZfdkZ:r3d+irYR1u/wc5aB3kZ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.39d1e26484920a1bf807957ec9413df0.exe

Files

NEAS.39d1e26484920a1bf807957ec9413df0.exe
.exe windows:4 windows x86

3df35ebf27aef47ee9ed5579153c3ad3

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

NeedCurrentDirectoryForExePathA
GetThreadGroupAffinity
RegEnumValueW
GetComputerNameExW
GetCurrentProcessorNumber
GlobalUnWire
FindNLSStringEx
BaseFormatObjectAttributes
AddScopedPolicyIDAce
InterlockedCompareExchange64

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 105KB - Virtual size: 126KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE