NEAS[.]12f98fa98fcc51faa95b3ab639af5d70[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.12f98fa98fcc51faa95b3ab639af5d70.exe
Size

76KB
MD5

12f98fa98fcc51faa95b3ab639af5d70
SHA1

700721f47cd50f4d31df3e462b3775892181fdd1
SHA256

2a65271f54dab457c7d1cfddabeb1b106ec148265b62fc985f98b9d7677f12d4
SHA512

81f043d9d8a2f27efdd0eeccf1c285e7dacbfd239a121663c274bff23946a4fae32227c0e1f1e49cfcef394bc224661a1c094de1ef13a7bffde1c94f5dd30e50
SSDEEP

1536:AD4l7rkRVrtaQzUe+45Rag91Xj8Ii3FKHVnQsU/edhZKz/U85:AD4M35Rauj8B3qQ5ekT5

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.12f98fa98fcc51faa95b3ab639af5d70.exe

Files

NEAS.12f98fa98fcc51faa95b3ab639af5d70.exe
.exe windows:4 windows x86

9482a66a1291f9cc0f4087e0f66f9776

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetTempFileNameW
ChangeTimerQueueTimer
CallNamedPipeA
SetConsoleOutputCP
InterlockedFlushSList
SetTimerQueueTimer
BaseDumpAppcompatCache
GlobalAlloc
ReadConsoleA
GetConsoleCommandHistoryLengthW

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.brdata
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE