NEAS[.]1ac8638b152fc80071225149e5c4ded0[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.1ac8638b152fc80071225149e5c4ded0.exe
Size

119KB
MD5

1ac8638b152fc80071225149e5c4ded0
SHA1

db55cfffe48efdd7e7ecfc1f3d611a7924ef458b
SHA256

0171b3d5079a39f8f2bffba6040afd076eb7152d61c2b7479221f4e91ee8d2ac
SHA512

5dc3839620a979318a1fdb852d87b1e1fa98f6b011950ff894ca04b7314f5a0ab12a6bd9ba205efd1159b1fb3183e1b33ffe0cea46216236080bf70722400d9e
SSDEEP

3072:WctHV0RLADD2/ixgKSv5f8LYCWp9EZqBuHob2Jn4A:VdVaADD2qxgvl8ckeuxh4A

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.1ac8638b152fc80071225149e5c4ded0.exe

Files

NEAS.1ac8638b152fc80071225149e5c4ded0.exe
.exe windows:4 windows x86

445696bdfaf1f6b33d71e6a37019c712

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

RegisterApplicationRestart
SetVDMCurrentDirectories
CreateProcessA
SetUnhandledExceptionFilter
FindActCtxSectionStringA
WaitForThreadpoolIoCallbacks
BaseElevationPostProcessing
GetLargestConsoleWindowSize

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 105KB - Virtual size: 126KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE