NEAS[.]0b46a31b8db155d2250874d5aa3aecf0[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.0b46a31b8db155d2250874d5aa3aecf0.exe
Size

119KB
MD5

0b46a31b8db155d2250874d5aa3aecf0
SHA1

a7e7cfe453782af1a8ed13e9e59e205c6facab72
SHA256

fe87765b2eef0d4d4766a4d4a52bd8b621ee78cad405d50e7e82ddbb8fb30b4a
SHA512

f34ec6a61758b6571881b8dc7d6b5fa897b1d3e4b1ec8f104ecd9d24c93cfab288a23bdc8b0e2cf07e9e5d137c0f3cd6d33a048b8537d02c216c42a7602f9d53
SSDEEP

3072:ERpvYyKHrDSkXGPaXOELRnK7gF0IXG+/4ZEKe:0pxKHSkXGPUOELRnXRgZEf

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.0b46a31b8db155d2250874d5aa3aecf0.exe

Files

NEAS.0b46a31b8db155d2250874d5aa3aecf0.exe
.exe windows:4 windows x86

2f6fc72ff2df27bf137b779692675102

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SetTimeZoneInformation
BasepQueryModuleChpeSettings
AdjustCalendarDate
CancelThreadpoolIo
SetConsolePalette
OpenThread
K32GetProcessImageFileNameW
GetTapeParameters
DeleteBoundaryDescriptor
PssCaptureSnapshot

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 105KB - Virtual size: 126KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE