NEAS[.]8a58fe7af526584b923895199c560cb0[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.8a58fe7af526584b923895199c560cb0.exe
Size

119KB
MD5

8a58fe7af526584b923895199c560cb0
SHA1

5c1da10f2111b0ba83ce5be097cfb867cfe4975f
SHA256

7cbc6f4e99a8bcb8be9cd1090b36dc197f603b9ec5eff6cc1803229381b22c17
SHA512

0c9e845c7acd6afed0cfb3fa02dec805df82afa1bff1965d4fc6ce811e2d8ae1f67a0e22587880cf2b10361be6e962fae0d74667911635080a88057e35c2c961
SSDEEP

3072:AaizfzGredl+l86HtW/n9yf3H9CZUn7ApoDjOGtKDd3fEu:Av5d8lFk/n9yf3HPncC94d3fD

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.8a58fe7af526584b923895199c560cb0.exe

Files

NEAS.8a58fe7af526584b923895199c560cb0.exe
.exe windows:4 windows x86

1b16a7bda91e0a438140a94acf7c42f3

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetNumaAvailableMemoryNode
RegisterWaitForInputIdle
RegFlushKey
VirtualAllocEx
GetThreadInformation
SetProtectedPolicy
GetNumberOfConsoleFonts
BackupSeek
GetSystemPowerStatus
GetApplicationRecoveryCallbackWorker

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 105KB - Virtual size: 126KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE