NEAS[.]7a23457be9c161a833c9b9babbefb060[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.7a23457be9c161a833c9b9babbefb060.exe
Size

119KB
MD5

7a23457be9c161a833c9b9babbefb060
SHA1

b00467266467e08626aef3da43e4341f7db61678
SHA256

1689ad57ad631bd80ebfb7e9170f9915d52af56da6d4936fe4258ebd8ccac667
SHA512

5282bb82ed53ac920072b0e6aba31a38608c517ffbf6927d5d20dc253a377ba47c3d0b99724bfbdc3dbb030e57da1d9f9d9feb1eefd508c62e5e3ed119031cf9
SSDEEP

1536:4ZJUEkOyyqWorShwz1chVIWBC+PZcQB630XFnltgM5Huy5G2kFmzEmpCxf/+6tih:uUfydaT1chVIWMs63WteyfkFmzk7zc

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.7a23457be9c161a833c9b9babbefb060.exe

Files

NEAS.7a23457be9c161a833c9b9babbefb060.exe
.exe windows:4 windows x86

e65553db29fd4436faaa27f05fdb50fe

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CompareStringW
lstrcpy
GetNumaProcessorNode
SleepEx
GetNumaHighestNodeNumber
GetSystemCpuSetInformation
DeleteBoundaryDescriptor
SetFilePointer
Heap32ListNext
DosDateTimeToFileTime
VirtualQuery

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 105KB - Virtual size: 126KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE