NEAS[.]786eab954a1cdcd66821dcaf5fbd7fd0[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.786eab954a1cdcd66821dcaf5fbd7fd0.exe
Size

119KB
MD5

786eab954a1cdcd66821dcaf5fbd7fd0
SHA1

1a4e9704a64475b858b231d6776bb5aa3443399c
SHA256

af5adbd0e63467792613f24f5de55885aff9b5804761cd838be08ed092581263
SHA512

fd4240fcce2791224ccb415c39061c65b3854e68d75c926ddf701d30d652e8b674914fd5ebd63f4d3b00fa86184bb65fd1ecd08fa2c732a2d4fedcc3592000e5
SSDEEP

1536:rePw3/FK0PU8klwyIW1ve/LO6NK6WaxfXOuG0Iqh1IW3lAx2qPFQ66yCF0TL/hSW:536BAQ6lWl8nbWa+juaqX6xPPpn

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.786eab954a1cdcd66821dcaf5fbd7fd0.exe

Files

NEAS.786eab954a1cdcd66821dcaf5fbd7fd0.exe
.exe windows:4 windows x86

e689a274abba73b27ed41e4a000d41b8

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

K32GetModuleBaseNameW
NlsEventDataDescCreate
PackageFamilyNameFromId
FreeConsole
CreateEventW
GetEnvironmentStringsW
BackupSeek
GetGeoInfoW
CreateThreadpoolTimer
Heap32First
DnsHostnameToComputerNameA

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 105KB - Virtual size: 126KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE