NEAS[.]b026ab6da08b9ea93ba2bd4715ce4210[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.b026ab6da08b9ea93ba2bd4715ce4210.exe
Size

119KB
MD5

b026ab6da08b9ea93ba2bd4715ce4210
SHA1

386f08a09fe1c6553422d21b0e34ceabacf8fe1a
SHA256

e9dfa6b5ffac619a19bfb76cd5414342f23780c3d87a13e39246b158ba258f63
SHA512

d540a371e3b5214a6e96d8a875c4275625404293e7fa476f69d19a4f167f937dd58e54cb23c79d4d095eb7672a33055d85c402f23534bbc5f6435a3b78c3ef96
SSDEEP

3072:rz+qfE1/avlymFtpRpkRnEtFa4iVIp0jKtK11M/IeDE:rHE1/sHpPFHHaK+1M/IX

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.b026ab6da08b9ea93ba2bd4715ce4210.exe

Files

NEAS.b026ab6da08b9ea93ba2bd4715ce4210.exe
.exe windows:4 windows x86

eca549ae4cce633635298db23727b3ae

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ContinueDebugEvent
GetPackageInfo
_lclose
CreateProcessInternalW
GetProcessDEPPolicy
GetLongPathNameA
GetCurrentPackageId
AppPolicyGetProcessTerminationMethod
GetProcessGroupAffinity
ScrollConsoleScreenBufferW

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 105KB - Virtual size: 126KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE