NEAS[.]c1fb140dfde236625291d2bd6eab3560[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.c1fb140dfde236625291d2bd6eab3560.exe
Size

119KB
MD5

c1fb140dfde236625291d2bd6eab3560
SHA1

376bb2a51ef71f25402430b9396337d37a3bcbe4
SHA256

faef0e3edbae3e86db1d7ae369383559f4cbe624a1b61d873454cd70f9631a0f
SHA512

06f56aed274d34bd8579129f7fc3ef13ddc79fc42372013c2ce2f9875e53028949b1aa5ab5fbbb82a3b172b615e8e4eba16b7dddbd242450d5d7a63424b91e7e
SSDEEP

3072:18ky+HY41x7yPMW1l/FHVVM9BSsAe0xXWHNR6:uz+v1x7yPZTy91AxINE

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.c1fb140dfde236625291d2bd6eab3560.exe

Files

NEAS.c1fb140dfde236625291d2bd6eab3560.exe
.exe windows:4 windows x86

21bf27a211220f3e6c465cdb4c8976e9

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ReclaimVirtualMemory
AppPolicyGetShowDeveloperDiagnostic
GetConsoleAliasExesW
FindPackagesByPackageFamily
VirtualUnlock
GetStringScripts
GetDateFormatEx
GetConsoleAliasesA
EncodePointer
UnhandledExceptionFilter

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 105KB - Virtual size: 126KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE