NEAS[.]8fdcd6df772da891517a74ba3f9a6760[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.8fdcd6df772da891517a74ba3f9a6760.exe
Size

119KB
MD5

8fdcd6df772da891517a74ba3f9a6760
SHA1

df8d0982296fb8e835edbcd7321878533074dca2
SHA256

4073468a24b1a1f5eb9056fc8f861fd5b92ffb104149e998e23d628bd2c030b6
SHA512

cc3b205323f8d413beb01079fcb48588afbba30fc6a08af15e1dc680a1eabb4410145c1a07e1fbc883cf3a7e2eea6dd462f5b51c0730a9b697011fc3ba877a84
SSDEEP

3072:N7JMv8Nd5LzukH9gnbZYvSv5LfnQWvvEa9dZsoRGrJYrcPCk0fTRt5h:FSYDzukKnbZYav5DQWvvEaXErWr8CZfj

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.8fdcd6df772da891517a74ba3f9a6760.exe

Files

NEAS.8fdcd6df772da891517a74ba3f9a6760.exe
.exe windows:4 windows x86

8d7ee9f1cd0fd0cfaa416797f584b5b8

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ReplaceFile
SetConsoleOutputCP
WerpGetDebugger
GetNumberOfConsoleFonts
GetApplicationRecoveryCallbackWorker
TerminateJobObject
GlobalAddAtomExA
SetCalendarInfoW
GetEnvironmentVariableW
LoadLibraryExW

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 105KB - Virtual size: 126KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE