NEAS[.]dda3cf7adc50b574bb93d184e7fa3c80[.]exe | Triage

Sharing

General

Target

NEAS.dda3cf7adc50b574bb93d184e7fa3c80.exe
Size

119KB
MD5

dda3cf7adc50b574bb93d184e7fa3c80
SHA1

9fcf2548216736a10e29f6de940b84fffefcce11
SHA256

20aa6b4fdd3afea228688a47def24fcc30b129defe49ce96f5fdd82ba1777e65
SHA512

623eaccd776d292456f1d08a5eb2afb4bbeec584e097157c51926bbd1a745603d651b42e689908b1bf7618f30f2739c4d6a7d9096505fb5196de76636d933518
SSDEEP

3072:8MpKZrFJpFGNkWseyDzjEZ2a7/KsVf2qtns7z:50ZNUklXj/a7/KsdPts7z

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.dda3cf7adc50b574bb93d184e7fa3c80.exe

Files

NEAS.dda3cf7adc50b574bb93d184e7fa3c80.exe
.exe windows:4 windows x86

a11db835e3fe67cc03f8779ad3a8a0b2

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

FreeResource
SetConsoleScreenBufferInfoEx
RegLoadKeyW
SetupComm
Wow64Transition
GetApplicationUserModelId
SetThreadpoolTimer
lstrcmpiW
ReadConsoleOutputCharacterW
GetEnvironmentStringsA
BasepFreeAppCompatData

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 105KB - Virtual size: 126KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE