NEAS[.]029a9ae70a1fc474c4d6825906640fe0[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.029a9ae70a1fc474c4d6825906640fe0.exe
Size

56KB
MD5

029a9ae70a1fc474c4d6825906640fe0
SHA1

6b4e56ca3ca96b5ca262957c74b4f7cae0c1a736
SHA256

3eb8fc924ff411de1d02e0528cc03e3204ac64e42961f04825a1403454b011a0
SHA512

d2fd8904a73996a3bb14891873e44383ec8864aca731e428e5a27c75255f1ee2b8bb7ac0029d091f3d4ab19ee789134867cc5fbe271c257fd07f1e03eb57286b
SSDEEP

1536:zPVm0SEGUUqhMh+IFSKChLBCd+CyeoGafT9U1EbFb2WksVH:zPE1FDCe8heER2DiH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.029a9ae70a1fc474c4d6825906640fe0.exe

Files

NEAS.029a9ae70a1fc474c4d6825906640fe0.exe
.exe windows:4 windows x86

d59af6904d25f92db7c5fd62c73c2ba8

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SetDefaultCommConfigW
UTUnRegister
EnumSystemLanguageGroupsW
SetCalendarInfoW
SetCommMask
RegisterConsoleIME
SetConsoleOutputCP
EnumResourceNamesW
GetProfileIntA
LocalCompact
PostQueuedCompletionStatus

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 66KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE