NEAS[.]022b724ceb752c779093f3a0532a3bf0[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.022b724ceb752c779093f3a0532a3bf0.exe
Size

56KB
MD5

022b724ceb752c779093f3a0532a3bf0
SHA1

7197130e56b9809917486ad9c3586b10273e665f
SHA256

3373509bc16698efd601eeeb4be118a673ca5cdf081d9f051cff60a8faadb193
SHA512

b9af195835ec33dd66f923a51a9e6cd5bad196a4e10dee757dece8d47fa83539c0990e893417871daf1ab560585171ed964107f43dd99240b1a89239146e1ea4
SSDEEP

1536:nQexBWTxCiktFEjV00DSosQg3fHP8eeTrkh8WqEH/A:Q8Fq0/J3fHTUvc/A

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.022b724ceb752c779093f3a0532a3bf0.exe

Files

NEAS.022b724ceb752c779093f3a0532a3bf0.exe
.exe windows:4 windows x86

ffd2518421137c228de1228de7897875

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

UTRegister
RegisterConsoleIME
FindNextFileW
VirtualUnlock
QueueUserAPC
Thread32First
Beep
DeleteTimerQueueEx
DeleteVolumeMountPointA
SetSystemTime
WriteConsoleInputVDMW
HeapUsage

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE