NEAS[.]cf43ce495a57f8a62e599c25a43fa1e0[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.cf43ce495a57f8a62e599c25a43fa1e0.exe
Size

119KB
MD5

cf43ce495a57f8a62e599c25a43fa1e0
SHA1

f1f9626baf5c9518aeb63969679b6b92ca91fe49
SHA256

8eadebac5b7a77cd53f533ba65664c4a7a93cd03aaa1da90351af0ba6a0a3c74
SHA512

13169040025fa0f260877eaf76091f3eb2bbb1a5c835e03c3454364ec23f5b7ffb1ad8f7192a87bb9b44faadbf4f6384b5833c1f58a0358ab36083831b813c75
SSDEEP

3072:6BFl3UOuQn2acr3eKR1NpZvY9XYMvRJI5FS9Rn6:6rl3UxQn2TrzfTKXYMvcE9R6

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.cf43ce495a57f8a62e599c25a43fa1e0.exe

Files

NEAS.cf43ce495a57f8a62e599c25a43fa1e0.exe
.exe windows:4 windows x86

1968778f3d16405d6f469bc7410931dc

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

FindResourceW
EnterSynchronizationBarrier
UpdateProcThreadAttribute
InterlockedPushListSList
K32GetWsChanges
GetLongPathNameTransactedW
CreateEnclave
WriteConsoleInputW
QueryActCtxSettingsW
GetConsoleCursorMode

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 105KB - Virtual size: 126KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE