NEAS[.]fb4caa66284d5fed50a5307056665b90[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.fb4caa66284d5fed50a5307056665b90.exe
Size

119KB
MD5

fb4caa66284d5fed50a5307056665b90
SHA1

8772f51c9950513b83eebb275fb2e8dbf5f7c08a
SHA256

a3f095ffb63946aee631cf9b15969e2e1d9abf4f572f0924b387f754c3b5afc4
SHA512

016305a64b04735c8158ca39ceb23fbc4b076a91e6d74dc936e1584f1676e262fd097996a4f65faa72690db5de4852f37177867c7ef5a96f38c018e0be6c5d5d
SSDEEP

1536:EzcUU47VLwlZb/6SSrwGrVJkFc6n815kxW8vrS68ortSErN6UtDTjfWrYuQpbzQ7:MrQp82QeJ1l+Ui8jUCx3HMeB9mMNM3z

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.fb4caa66284d5fed50a5307056665b90.exe

Files

NEAS.fb4caa66284d5fed50a5307056665b90.exe
.exe windows:4 windows x86

7771c53c3879c137f6a5af7f442083b1

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

NotifyUILanguageChange
GetDiskFreeSpaceExA
SetHandleContext
GetConsoleAliasW
GetProcessId
CreateDirectoryTransactedA
AddConsoleAliasW
QueryIdleProcessorCycleTimeEx
BasepNotifyLoadStringResource
FindFirstFileExA

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 105KB - Virtual size: 126KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE