NEAS[.]d9db7a336906e72ae40ac4597a49ad70[.]exe | Triage

Sharing

General

Target

NEAS.d9db7a336906e72ae40ac4597a49ad70.exe
Size

119KB
MD5

d9db7a336906e72ae40ac4597a49ad70
SHA1

f308f8740b8e4c57c0f40bc0ec8fb85ba3bfe4b1
SHA256

81631e6cf82af689af17aacd52d8c4e1a64bfa8ed83e3f74af4917396ea6f517
SHA512

70b379c2a733a2e1065b73e5aef5188755cb58f69b253984fc1140c55b46a6f9daca1c73e9c18ace1f70a9872a27d36ee4424ad97601bb049aeab3b15bfa551b
SSDEEP

3072:gsYBcpH0eDnIrpJM3HKCrOnYMh8CmA2PnoVBjPFpmSU:gsCcpH3DIVCrOnBWQjS9

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.d9db7a336906e72ae40ac4597a49ad70.exe

Files

NEAS.d9db7a336906e72ae40ac4597a49ad70.exe
.exe windows:4 windows x86

56499c7e48645bfca75ade2e14e66ae2

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SetProcessMitigationPolicy
OpenState
RegGetValueA
UnregisterBadMemoryNotification
FindResourceExW
GetDateFormatA
WaitCommEvent
K32GetProcessImageFileNameW
LeaveCriticalSection
GetVersionExW

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 105KB - Virtual size: 126KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE