NEAS[.]271705ed1158aeef675770a2c92b7300[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.271705ed1158aeef675770a2c92b7300.exe
Size

119KB
MD5

271705ed1158aeef675770a2c92b7300
SHA1

c5b34a009a3ec16abe189999e2a95b12753ad7c0
SHA256

e72d6df462b41e58b7ae37217aad8c723d379775ae29411da636f92558030aba
SHA512

53913718edfa597a73a6e4fa8f21a392a375e27b1aac58b4c4064715735d2d4d4a15a609425252c2dca798dc78b0931d9f1330cce7447f1e8b691e8cc78e1e6f
SSDEEP

1536:4BUQlPXqSDAVuom2jobE3GVuT4i/VghGPI6RYI80ASr+/SsoZ9ha3gke0uJgIBQt:eUQlPbAVuqiajA8YIzy/CXNJb2vvWuD

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.271705ed1158aeef675770a2c92b7300.exe

Files

NEAS.271705ed1158aeef675770a2c92b7300.exe
.exe windows:4 windows x86

7a5c3d0beae4ff94472c41dc4cfa6bc8

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SetIoRateControlInformationJobObject
EnumCalendarInfoA
WaitForThreadpoolTimerCallbacks
WriteConsoleW
GetProcessIoCounters
GetConsoleCommandHistoryLengthA
LoadPackagedLibrary
UnregisterWait
CheckTokenMembershipEx

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 105KB - Virtual size: 126KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE