NEAS[.]30b5a4491a6fa993f333178aadb4a760[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.30b5a4491a6fa993f333178aadb4a760.exe
Size

119KB
MD5

30b5a4491a6fa993f333178aadb4a760
SHA1

06223fc5fe6647d32b2841668dfa0aaa5023f602
SHA256

36894799c21849aaf3517e1910e5055c981b91ce16114583f00e031f3256202f
SHA512

53b48bcd1e143aea59fbb14d800caf85b4665fb3ef98bdca5a40d22f26770253b97c416aee11c69c081b9d7dc15e4e8457d6d062ef835c560d1346eb7074636a
SSDEEP

3072:z1OyUSHtABfwkLrZY6EIMxhSDjFp1LbWlmW:z1+KSWkni6ErxEBc

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.30b5a4491a6fa993f333178aadb4a760.exe

Files

NEAS.30b5a4491a6fa993f333178aadb4a760.exe
.exe windows:4 windows x86

40f6bb5a28b8ff09a70ba1a28cf17eca

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetCalendarDaysInMonth
CopyContext
GetNumaProcessorNodeEx
BeginUpdateResourceW
GetNumberOfConsoleInputEvents
GetProcessHeaps
FatalAppExitA
BasepCheckAppCompat
BasepCopyEncryption
SetTapePosition

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 105KB - Virtual size: 126KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE