NEAS[.]d8b897ad68cad3f0d1b30f3207484b40[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.d8b897ad68cad3f0d1b30f3207484b40.exe
Size

119KB
MD5

d8b897ad68cad3f0d1b30f3207484b40
SHA1

60aa6f6b601267e46948cd4a8f247fed1fbf6855
SHA256

de90ae8af846bc81373702755f8f45a1380a828244999727b57485373f1a4833
SHA512

6c0169b401d92fd1ddfff37b174d9ba1c81360b0442857bb4bf1021dcbf4b5aa90e4520ce8e0b05a507569487facc2a6bcdea7ff7e1deaa6ca8d9c2b7ade44b7
SSDEEP

3072:PyP4bkWTWDfiy3MOA1dWLvO/CG1ZwKUQ9v8jkTmtEA10g8IWFGWJYZ:Pe4HTWD3cOA1dA4/waVTI1GFoWJYZ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.d8b897ad68cad3f0d1b30f3207484b40.exe

Files

NEAS.d8b897ad68cad3f0d1b30f3207484b40.exe
.exe windows:4 windows x86

9d76f41a8bf471b59af047bee4bdaef2

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ReadConsoleW
SetEnvironmentStringsA
FreeEnvironmentStringsA
CreateActCtxWWorker
RegDeleteTreeW
GetProfileIntA
GetStdHandle
UTUnRegister
DosDateTimeToFileTime
GetFileInformationByHandleEx
LocalFlags

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 105KB - Virtual size: 126KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE