NEAS[.]e8ef3b891eb1672d1f7b648c4fa11a20[.]exe | Triage

Sharing

General

Target

NEAS.e8ef3b891eb1672d1f7b648c4fa11a20.exe
Size

119KB
MD5

e8ef3b891eb1672d1f7b648c4fa11a20
SHA1

0af03886eb15ebdb6fc347ca4da43a27982be5e4
SHA256

e246ecac9bf4d0b2568a5577eaa01cd894c01df24d662067598f6582749df9cb
SHA512

825043f76fae23e1a6512fd639bc1ad1ba01a800d7b2182f80257c3aaf301d7bd80b5764d10d9de950177d2daa1aa8a8e21c3e96d6b0ba0baeba49dd59d546ab
SSDEEP

3072:lJMjgRed6e3at9vtmpsu/jBWUMMTf9mBXRw/Ob5Ah4gikoqH7p:lJy9okZbBR79m759Aeg/oC

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.e8ef3b891eb1672d1f7b648c4fa11a20.exe

Files

NEAS.e8ef3b891eb1672d1f7b648c4fa11a20.exe
.exe windows:4 windows x86

410ecf7e00dd38143557904d5e288332

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateWaitableTimerExA
SetupComm
SetLocalPrimaryComputerNameW
GetThreadDescription
GetSystemTimePreciseAsFileTime
GetThreadContext
OpenMutexW
RegQueryInfoKeyA
GetEnvironmentStringsW
GetApplicationRecoveryCallbackWorker

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 105KB - Virtual size: 126KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE