NEAS[.]1b2ac920762cd595611eca9ff9d252f0[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.1b2ac920762cd595611eca9ff9d252f0.exe
Size

633KB
MD5

1b2ac920762cd595611eca9ff9d252f0
SHA1

877e5bcb59dfefcace5fceb36a81e4ece111d38d
SHA256

170ffaa32524a1596ca4bd4b0ce097275722da1c3dc8a145041b2ea06ddb9960
SHA512

146cb94f74b42c9c8d07b5f5c236d7ce1e8b313e02c4d0b0dc37a3ed327bb514466362b214d88faa369acedc349de67867db9d6f4c2e1862001e38bad21a2c9a
SSDEEP

6144:lA36LkIQZnGmMZAfxlYr+P+L+2qyWG8PQpAGxlxe74Iix13Bgh3:lymNN5lr+P+LRt8PQOGxfe7kxgh3

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.1b2ac920762cd595611eca9ff9d252f0.exe

Files

NEAS.1b2ac920762cd595611eca9ff9d252f0.exe
.dll windows:6 windows x64

555c3daef13df096b6da900a79ca763a

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

kernel32

DisableThreadLibraryCalls
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext

Sections

.text
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 512B - Virtual size: 36B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 40B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ