NEAS[.]8ced1500d04b9277c02c7c9958e28480[.]exe | Triage

Sharing

General

Target

NEAS.8ced1500d04b9277c02c7c9958e28480.exe
Size

119KB
MD5

8ced1500d04b9277c02c7c9958e28480
SHA1

4922442988c997debc7a4da8f409b350609b3f9f
SHA256

84c4e432c5c7bbbec59c9f715ce3f42b5517713a586daf21783170ada1720a2e
SHA512

559244c973c595bef9c7ae3bd227a358025c73b19b0c73366d3687acf2abc0f205a08fe90074346ed18724c45bebf1d514f3ef7649b0afddf1ce588ddb12ba10
SSDEEP

3072:12OZrEJD6Plw5nzm/mKDiBxgyiVIRHELs0eazmV:1xZrEJDvn+LIl+9Vza

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.8ced1500d04b9277c02c7c9958e28480.exe

Files

NEAS.8ced1500d04b9277c02c7c9958e28480.exe
.exe windows:4 windows x86

e8c4b9a557353f7875d82f191d48627b

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateProcessA
GetExitCodeProcess
VerifyConsoleIoHandle
PssWalkMarkerRewind
GetStartupInfoA
FlushViewOfFile
CloseThreadpool
PssWalkMarkerSeek
SetIoRateControlInformationJobObject
RtlUnwind

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 105KB - Virtual size: 126KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE