NEAS[.]f3a2eb43117eb659f919edb9c2b804c0[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.f3a2eb43117eb659f919edb9c2b804c0.exe
Size

119KB
MD5

f3a2eb43117eb659f919edb9c2b804c0
SHA1

c9ecb650bb7bff5deebf6b682cc5c1344fcaaf63
SHA256

ede9e75f914ad5df058fd38364ae0f853021223541d9ff8cce034f9df45584eb
SHA512

5c9c198e7d4c03849b50b93f677bcf002f59e5f584ff4cdd75061e0cc52f1eb94d8f564f7ed97665c08dd3117ffbc4c71392c12fcd1c720b0c2e152d48fa3781
SSDEEP

3072:5x0PvQTh8AQJQGEWU2TmhohpO2MOR/CFuzbwMCZ/LpZIC:5xZThyaapihQpO2Ms/7bwMWD5

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.f3a2eb43117eb659f919edb9c2b804c0.exe

Files

NEAS.f3a2eb43117eb659f919edb9c2b804c0.exe
.exe windows:4 windows x86

eddd2d52c9bafd3d0c21f7641906380a

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

IsBadHugeWritePtr
InitializeEnclave
Module32FirstW
RemoveVectoredContinueHandler
GetPackageFullName
SetEvent
CopyFileA
CreateFileMappingW
GetCPInfoExA
CreateSymbolicLinkTransactedW
QueryActCtxSettingsWWorker

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 105KB - Virtual size: 126KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE