NEAS[.]29397da257434a55f1d6601f750f1730[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.29397da257434a55f1d6601f750f1730.exe
Size

9KB
MD5

29397da257434a55f1d6601f750f1730
SHA1

e1cd41fbdb0edacd29e287d1ddcde91e0e90d0db
SHA256

3f70c9065c4cb8b3f9e92b97f4bd23e72bf9a3105cd9a77045ade7f68957e73e
SHA512

6b75906308db03105f3f5951e448d405f385e16e1d6f46b5647787173cd523be9240bf692c9cad55bf2e33d9735de19ba33a713fbadc04c2c0660dcb806b6ac4
SSDEEP

192:snTnCpYu0EaeNhP5WTuTuQW7V2BVsMndoW1:kTnCeu0Ea25ITVasFW1

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.29397da257434a55f1d6601f750f1730.exe

Files

NEAS.29397da257434a55f1d6601f750f1730.exe
.exe windows:5 windows x86

a43a38512da1f8b15e273b7213ff70e7

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

MessageBoxW

kernel32

GetModuleHandleA
SetUnhandledExceptionFilter
GetCurrentProcess
CloseHandle
LocalFree
FormatMessageW
GetLastError
CreateProcessW
GetSystemDirectoryW
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
TerminateProcess
UnhandledExceptionFilter

msvcrt

_c_exit
swprintf
_XcptFilter
_cexit
exit
__initenv
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler3
_controlfp
_exit

ntdll

NtQueryInformationProcess

Sections

.text
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 60B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ