NEAS[.]b0ab44d2622ab81e8edbaa24e0c084c0[.]exe | Triage

Sharing

General

Target

NEAS.b0ab44d2622ab81e8edbaa24e0c084c0.exe
Size

119KB
MD5

b0ab44d2622ab81e8edbaa24e0c084c0
SHA1

55274678ceb1db12f1214495b6443a6116df9adf
SHA256

62c384fdf5e36ab65f04f512b403a7dae840953f0c183a57248277c039d0bb36
SHA512

a7adf39f671f616cdf3981b984b8e993e1691597363d57726b4512874d339d6d4ff4fbac2bf659dd324d014d1a616ffe8545705de834d1a2b43505995f1b3637
SSDEEP

3072:nl75zQsMGBPPQIfNbJpTTar/Gyn9a2lWmB5dXVE:nJSuBPPNfNVILGyqS5d2

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.b0ab44d2622ab81e8edbaa24e0c084c0.exe

Files

NEAS.b0ab44d2622ab81e8edbaa24e0c084c0.exe
.exe windows:4 windows x86

cd65fef6dfdfd13407bebb9cff614955

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

DebugBreakProcess
GetProcessorSystemCycleTime
FreeEnvironmentStringsA
PackageNameAndPublisherIdFromFamilyName
OpenJobObjectA
NlsUpdateLocale
BuildCommDCBAndTimeoutsW
GetTickCount
DeleteBoundaryDescriptor

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 105KB - Virtual size: 126KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE