NEAS[.]30208296fc9b861bab994b196ff28b90[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.30208296fc9b861bab994b196ff28b90.exe
Size

119KB
MD5

30208296fc9b861bab994b196ff28b90
SHA1

c344562cf8ab8c232a2165106db6d7ce11236eb3
SHA256

4ee311c6a49fab6a19d9f0374e8c0a83919be17ee76f1580699737916a7eda1a
SHA512

76364b3398968d83db9483fd1550017488750a5f606ddc00046580b56bd4ff1a860d482afe13159486ceeab93e37a0c98b6677e1936cf67f178db08ecb8ef16b
SSDEEP

3072:sWOUNgFE/V4gpx9bK1LAd1QNVzpwKwfJTuWoiIC:sWOPe/Cgpx9SRp7HiR

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.30208296fc9b861bab994b196ff28b90.exe

Files

NEAS.30208296fc9b861bab994b196ff28b90.exe
.exe windows:4 windows x86

570ad2e94527d6ac62ab0f656ba66005

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcessTimes
DeleteCriticalSection
RegisterWaitUntilOOBECompleted
SetConsoleMaximumWindowSize
ApplicationRecoveryInProgress
ExpandEnvironmentStringsA
BuildCommDCBW
GetComputerNameExW
GetVersion

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 105KB - Virtual size: 126KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE