NEAS[.]186a23e6ac0853dda2767a35793fbae0[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.186a23e6ac0853dda2767a35793fbae0.exe
Size

119KB
MD5

186a23e6ac0853dda2767a35793fbae0
SHA1

5fa80cc468b3a9a8e4dbb82f411a3cb4c6711551
SHA256

cfa440b1d0d882e53f0cf30711094a08671e02a4f322eed5c038acefb22c1b27
SHA512

8751b6904cb5b9b5cb4e6cee1d44ddf166d1eca216ee660c3e5a28c628d978c14687b65e87e9005867fd7585cbd52319984e97fff73c836488546b44168ca70a
SSDEEP

3072:AZrCRZxRSEJj/pkvbNF81nhx+OEeBSQ3pK5c1TEfutWBscKA:uajxkvD4v+o5ZKATEG0Jt

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.186a23e6ac0853dda2767a35793fbae0.exe

Files

NEAS.186a23e6ac0853dda2767a35793fbae0.exe
.exe windows:4 windows x86

9b1a6647302d30f24e77194b00d59e59

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

EnumTimeFormatsA
InitializeSynchronizationBarrier
CreateSemaphoreExW
IsWow64GuestMachineSupported
ReplaceFileA
GlobalMemoryStatusEx
IsBadHugeReadPtr
RemoveDllDirectory
ReleaseMutex
CancelWaitableTimer

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 105KB - Virtual size: 126KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE