NEAS[.]34c931e16565da269ad772a6a88a45b0[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.34c931e16565da269ad772a6a88a45b0.exe
Size

119KB
MD5

34c931e16565da269ad772a6a88a45b0
SHA1

ccddf195ac443e0126fd1c840432f229b959616a
SHA256

05c72582197fe2f4dd63c6f00b9d0fffebb19ec7fdca5b8fcc9ff576eeb9b4c1
SHA512

dec9d84caa3bd5305b8daee35093db2199502076ead3864b1a5fda77d763bfe3b7fd902e6dd5914eaf2c8a562e3118803cc3c2f1c36fc1e8b52c283f7db1cd49
SSDEEP

1536:sdN4f7TO2+Su2uZgZ9C2Hx2f7np5k3jjf1hNwWOxnXN1S2colpF6GBlfb6BWy0Bz:jTFq5SZ8cK7QTTSnXd1TfOZ0LWsq0D

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.34c931e16565da269ad772a6a88a45b0.exe

Files

NEAS.34c931e16565da269ad772a6a88a45b0.exe
.exe windows:4 windows x86

e4baae17b34acfc790db12fb6a23e999

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetNumberOfConsoleInputEvents
GetFileInformationByHandleEx
RegisterWowBaseHandlers
QueryThreadProfiling
IsNativeVhdBoot
GetSystemRegistryQuota
CreateThreadpoolIo
Module32Next
SetProcessShutdownParameters

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 105KB - Virtual size: 126KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE