NEAS[.]d024696b3ce394d9330bda71aa32c550[.]exe | Triage

Sharing

General

Target

NEAS.d024696b3ce394d9330bda71aa32c550.exe
Size

119KB
MD5

d024696b3ce394d9330bda71aa32c550
SHA1

0c1a14c541ec71ba730b621d2ee0c6bea7adcac6
SHA256

9b00ece7c768ae1f3e51f04e22d0ad7a249f69d12e8273fcd2d59a4cad5ac530
SHA512

e146db0d16d7f3f60c99306bedd96b329197dac83ca2aabb5ecb205e518c5917ebc73d63f2671e50d37dbecd7b152f3d0988b7fc0f84a1df78b0556d458488ee
SSDEEP

3072:SNiHgplp3yOp4CzfMfJsz/L7YESlGCYvKnZhhUb:2ucb4CjM+7/aOWnk

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.d024696b3ce394d9330bda71aa32c550.exe

Files

NEAS.d024696b3ce394d9330bda71aa32c550.exe
.exe windows:4 windows x86

71dfd7de20d06938d44c3c73afe533ea

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

RegisterConsoleOS2
AllocConsole
PssWalkMarkerTell
EnumerateLocalComputerNamesA
HeapUnlock
ReclaimVirtualMemory
NlsGetCacheUpdateCount
GetCachedSigningLevel
BaseCheckAppcompatCacheEx
FindFirstVolumeMountPointA

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 105KB - Virtual size: 126KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE