NEAS[.]a17559b7c42ab9d33b8598bbfa5e4170[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.a17559b7c42ab9d33b8598bbfa5e4170.exe
Size

119KB
MD5

a17559b7c42ab9d33b8598bbfa5e4170
SHA1

5b39ebb20d1e3575514529c7de06b200058c7e0d
SHA256

5ec98853d0e657e9d0204013deda2810ea474659b533a60be14f2b27673bc08b
SHA512

acc885c38018e5cc78657112d4c8cd20a1d4743bcd6d205f8da0fe20248a833c80a17a2566269848322c737976d8a380dc6c55d73c28996ceeffc79f0b39abc3
SSDEEP

3072:wRvl0oAQkytVXjiynjWrWtnV+B8FW0JZPeUh90X:wllC2tQy6gUB83JThCX

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.a17559b7c42ab9d33b8598bbfa5e4170.exe

Files

NEAS.a17559b7c42ab9d33b8598bbfa5e4170.exe
.exe windows:4 windows x86

80613d9d2e489f0ff7fa7f8e6a4c0ef0

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GlobalAddAtomA
FindFirstChangeNotificationA
BuildCommDCBW
BasepGetComputerNameFromNtPath
GetConsoleSelectionInfo
GetConsoleCommandHistoryA
FindFirstVolumeW
GlobalDeleteAtom
AddConsoleAliasA
CreateFileMappingNumaW

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 105KB - Virtual size: 126KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE