NEAS[.]91bde237f2d35273fe312b93f7f357c0[.]exe | Triage

Sharing

General

Target

NEAS.91bde237f2d35273fe312b93f7f357c0.exe
Size

119KB
MD5

91bde237f2d35273fe312b93f7f357c0
SHA1

ea58bae61055d20982895b2f79c9a0324e804bbe
SHA256

dfe642c76b0a3b26e0f280bb8d603d911759e5aff895737b0bdcd5504d7fad77
SHA512

86eda7a449efaebf8b1df1c551b58b457c072dbd8776a2d293ce1e5a1581041c6a9b2acab3e050f8076e0418866b7b788bc921bb08a9f9de4c07998aaa61d867
SSDEEP

3072:KNdfWglF3Khji2Wy3n3Qpvh00LmIGOfiayRV+SQITpz0cq3pv:AeglUhji2vQfwOqZDQOzkpv

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.91bde237f2d35273fe312b93f7f357c0.exe

Files

NEAS.91bde237f2d35273fe312b93f7f357c0.exe
.exe windows:4 windows x86

0dc6feb60370f9b455619db51b758c8d

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

IsValidLocaleName
WinExec
WriteProfileStringW
CreateNamedPipeA
BuildCommDCBAndTimeoutsA
EnumerateLocalComputerNamesW
GetThreadPriorityBoost
SetNamedPipeHandleState
SetSystemTimeAdjustment
EnumResourceLanguagesExA

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 105KB - Virtual size: 126KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE