NEAS[.]345a56bbbe4169cdcae6241cf4cd8740[.]exe | Triage

Sharing

General

Target

NEAS.345a56bbbe4169cdcae6241cf4cd8740.exe
Size

119KB
MD5

345a56bbbe4169cdcae6241cf4cd8740
SHA1

84e6490858cfafd6d73c850f7dcecc1ab28c8ddd
SHA256

8463e850f56487185cd288baaba8e90efac8514170995b4c40abee92bd6ee9d1
SHA512

2bf145c5bc95b7589a1099f2ec075f2626be4cbd867b485285e67216e98a959f8d1d3901b66260f1291beb53fa885d7d84ca3075a8aacf7a76464082484187ab
SSDEEP

3072:whsbNJIs7MLOx73TNvK1Bge7N0osNUlAY1K5kDbQga8:whsxJIss8J3ex07iOY199d

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.345a56bbbe4169cdcae6241cf4cd8740.exe

Files

NEAS.345a56bbbe4169cdcae6241cf4cd8740.exe
.exe windows:4 windows x86

4603601eea0cc734b2d702dc34284748

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

BaseFormatObjectAttributes
VirtualFreeEx
SetProcessShutdownParameters
GetProfileSectionA
FlushConsoleInputBuffer
SetConsoleWindowInfo
GetExpandedNameA
VirtualQuery
GetNumaProcessorNode
InitOnceComplete

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 105KB - Virtual size: 126KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE