NEAS[.]207facebcfd1f84321133db6c862c180[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.207facebcfd1f84321133db6c862c180.exe
Size

119KB
MD5

207facebcfd1f84321133db6c862c180
SHA1

08968918d93c116e0679cb28801ace141575ae62
SHA256

c2486189477c849592c7c516e64daa46080f3b633fcbe78169804bc536bd74f4
SHA512

8a256a4ea7afdae50a92d3b7f14581a7158336de6b54ec275bd78469fddf7df14ae49cad351b4dec80113ed5380e66f8385bcd9641fb4bb8de372b421a84cba8
SSDEEP

3072:rGTVMgNuDA8OqxWDTMsX2JBnktNWTYQEBn+:+pNuDA8OqWQs6nHl4+

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.207facebcfd1f84321133db6c862c180.exe

Files

NEAS.207facebcfd1f84321133db6c862c180.exe
.exe windows:4 windows x86

300f05542f974ef28a0384f6e2281548

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetThreadSelectorEntry
UnmapViewOfFileEx
GetCurrentThreadId
DisassociateCurrentThreadFromCallback
GetConsoleHardwareState
EnumLanguageGroupLocalesW
FlsAlloc
LeaveCriticalSection
GetFileAttributesTransactedW

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 105KB - Virtual size: 126KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE