NEAS[.]e036866807ee69eacc55e30f4f836660[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.e036866807ee69eacc55e30f4f836660.exe
Size

119KB
MD5

e036866807ee69eacc55e30f4f836660
SHA1

524dce317d2b7cb280e3bdacdf99beb7e6149511
SHA256

fa58647d180db89d4487457e077ad6ff97067b6be20df8c45b119e73b99d430b
SHA512

df7db8ed59a2246ecd009f8a437f37d1ebc867cb4ee25d0111ea3e6fefe003f0b9076811fbcd1c8a62302f75fbf7997993d0d761cdeb5913d43a74261da808aa
SSDEEP

1536:Ir4rpBxuUw1Sqmf5LSC7ZjXLWB7O6b7lEBa1oj9Kkze3tRE7/SJzsehOWuLd71Sc:rBxuNSB52ChXqO47qkojUE7/S12JOdGP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.e036866807ee69eacc55e30f4f836660.exe

Files

NEAS.e036866807ee69eacc55e30f4f836660.exe
.exe windows:4 windows x86

95cca439a01c0229e5f67672fbe454f3

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

QueryIoRateControlInformationJobObject
ReOpenFile
GetCurrentPackageFamilyName
GetConsoleAliasExesA
ConvertCalDateTimeToSystemTime
InitializeCriticalSection
GetHandleInformation
LocalCompact
EnumDateFormatsA

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 105KB - Virtual size: 126KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE