NEAS[.]8d16b013aee85eb98a64f57db7ff9160[.]exe | Triage

Sharing

General

Target

NEAS.8d16b013aee85eb98a64f57db7ff9160.exe
Size

119KB
MD5

8d16b013aee85eb98a64f57db7ff9160
SHA1

1404482f93c66bd48949fa23a90a22db6e616933
SHA256

dd3a97687d634ded6807838b0a47368c3914fa141231f2d3dadb3b019e100613
SHA512

5ac1e27903ae52f984217ca3787a3212c4cd98d3291fc00647695249a852aac755686be8d92c5a644413913290f4a0fe1235e3a569959d886da370d840b6011d
SSDEEP

3072:xqZFlXyErxdYcV4wAbc9Z2z3o0LuwoRQy5XYCRUaype7Mg5dO4:xqMUdZKwm1z3o0LToQy5oCRlN7Mg/

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.8d16b013aee85eb98a64f57db7ff9160.exe

Files

NEAS.8d16b013aee85eb98a64f57db7ff9160.exe
.exe windows:4 windows x86

bb5de79f7849392581b292bf6b3eeafe

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

DeleteAtom
CheckAllowDecryptedRemoteDestinationPolicy
VerifyConsoleIoHandle
CreateWaitableTimerW
LCMapStringA
CreateDirectoryTransactedA
IsBadCodePtr
FindNLSString
FlsAlloc
SetConsoleMaximumWindowSize

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 105KB - Virtual size: 126KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE