NEAS[.]80436c492e1438cf85615b70d2efd780[.]exe | Triage

Sharing

General

Target

NEAS.80436c492e1438cf85615b70d2efd780.exe
Size

119KB
MD5

80436c492e1438cf85615b70d2efd780
SHA1

1322647db4f13151ca5ed72517c86a6b19ddc0b9
SHA256

656ded2e4a09091ea24190299122384baa43cfe86abded190fded93f5df6a744
SHA512

f21a5cf2c982aa2c86016682ded1577d78972c9dfa5e06bcc40bdf8049199fd795e2a90fedef37246b32a14c3b4cdb8bf309493508b3bc256af7bdcb64b89566
SSDEEP

3072:bnyi12GZYhMdoslY9BVkAmmE3mWsl5X64PkZT5ik1rq:DPEEbWrfz6XsztS+

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.80436c492e1438cf85615b70d2efd780.exe

Files

NEAS.80436c492e1438cf85615b70d2efd780.exe
.exe windows:4 windows x86

0df5b02d674a57f3d69bb6affa122f06

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

Module32First
GetLargePageMinimum
BasepCheckWinSaferRestrictions
WerRegisterExcludedMemoryBlock
IsWow64Process2
CreateEventA
DefineDosDeviceW
GetShortPathNameA
SetConsoleNumberOfCommandsA
ConvertNLSDayOfWeekToWin32DayOfWeek

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 105KB - Virtual size: 126KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE