NEAS[.]143868cbf0276a4aebb6ec7f3d9b84d0[.]exe | Triage

Sharing

General

Target

NEAS.143868cbf0276a4aebb6ec7f3d9b84d0.exe
Size

119KB
MD5

143868cbf0276a4aebb6ec7f3d9b84d0
SHA1

492d7f2dfe093e0348da61e01583e7e14927aead
SHA256

02e8e5a49cba4562ee3e5e719556f15e4b47e1f875a768e08c4017cc55e35aa6
SHA512

6671cc9f1f2d92abe69fb94b4ef3014b3d34ebef9d0a2bcb6ba259689fa569f23a047b00f4f79f935671245f87207faa4427bdd2701af34e09db016919b2084d
SSDEEP

3072:/L7bdwqoaRk91TIUXeZ5JW7BoEjmnnbuUR+y9rF:/nCqlR81T7OZ5gqE4nSHy9J

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.143868cbf0276a4aebb6ec7f3d9b84d0.exe

Files

NEAS.143868cbf0276a4aebb6ec7f3d9b84d0.exe
.exe windows:4 windows x86

dd42f0fd0d9758690ca0e1a449d5e007

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetConsoleAliasA
RaiseInvalid16BitExeError
GetCurrentPackageId
PowerSetRequest
Wow64GetThreadContext
SetFileCompletionNotificationModes
GetDateFormatEx
SetCriticalSectionSpinCount
EnumCalendarInfoExA

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 105KB - Virtual size: 126KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE