NEAS[.]89335e962831b6b95d0e14dc0a16e490[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.89335e962831b6b95d0e14dc0a16e490.exe
Size

119KB
MD5

89335e962831b6b95d0e14dc0a16e490
SHA1

b8f35980fb9ec10607e2ac65125b8a1f06309d37
SHA256

0f32416aa07517098194a91daef0707d7e328b32935f4b6da64fa8b154a40b89
SHA512

117df012f351c8511bb3fd5ab4ef98eb92c223730d1d8c51fd2c9e47d06a99f602610e744a0e5d93361882646c36a72a13a41fb51324bd24d724577f3df29544
SSDEEP

3072:YFhRbMm0I19A9CCwAevx74uA7WRHN0i/JHffVqxTGJPdy:0DN/9A8CwAq0uASxRBftqxTGG

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.89335e962831b6b95d0e14dc0a16e490.exe

Files

NEAS.89335e962831b6b95d0e14dc0a16e490.exe
.exe windows:4 windows x86

8f03a2d1e7d33ffa443149a95f37cfee

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

K32EnumDeviceDrivers
CheckAllowDecryptedRemoteDestinationPolicy
GetConsoleTitleA
FlsSetValue
GetCurrencyFormatEx
InvalidateConsoleDIBits
GlobalGetAtomNameW
AppPolicyGetClrCompat
CreateBoundaryDescriptorA

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 105KB - Virtual size: 126KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE