NEAS[.]b27302414efcfa2a0340d812669c1380[.]exe | Triage

Sharing

General

Target

NEAS.b27302414efcfa2a0340d812669c1380.exe
Size

119KB
MD5

b27302414efcfa2a0340d812669c1380
SHA1

565de833e68a27c217fe57f9d7e74a22dbe7b172
SHA256

1fb4a134903782d196314189deceb157dfdd3bdb211ee3ac865cb8fda5be69e9
SHA512

a79d38e68fe773d85442082c14b8e05e95eda2bc2578a0d1442b070a9cc1aa40af936a01c5db32cdb2c8e6c06094efebd735ff8c597a54834cd99d7f2077d692
SSDEEP

3072:rTU8FBIeDi8qbzan/Va2QMI2dn9UCmNJVXBs5eqgeyw7YZ:v/FBIeDi8Kmrh9UFNueqgeXYZ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.b27302414efcfa2a0340d812669c1380.exe

Files

NEAS.b27302414efcfa2a0340d812669c1380.exe
.exe windows:4 windows x86

911489aa4347e14a369cb893ac7ec296

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

_hread
NlsUpdateLocale
WriteConsoleA
FindActCtxSectionGuidWorker
SetProcessPreferredUILanguages
GetCurrentProcessorNumber
BaseCleanupAppcompatCacheSupport
GetSystemDirectoryW
IsBadWritePtr
DefineDosDeviceA

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 105KB - Virtual size: 126KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE