NEAS[.]91bd20ec708f24469f65c37bba7101f0[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.91bd20ec708f24469f65c37bba7101f0.exe
Size

119KB
MD5

91bd20ec708f24469f65c37bba7101f0
SHA1

477fdb9f8e420d0f0a5fc47763eef263cfdd2b7d
SHA256

a16c713f4c04e3a6e76efa932330355ded1c1499b49ca6eebf82fb1a4ec038f2
SHA512

bc4fc866ba0545f5aeeb87626f96a27095ed37b89afd7c7f791f3bd407fef24e66857857c9aeeed6838773f95772417e2f8d58c94ca1c1336e98978b6b4122e8
SSDEEP

3072:F5yUXzqvEMycfTSbOew0IgaUUnN98YUXjB7Z:HyOpc7o3w0kuF7Z

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.91bd20ec708f24469f65c37bba7101f0.exe

Files

NEAS.91bd20ec708f24469f65c37bba7101f0.exe
.exe windows:4 windows x86

dec2039683db5dc118269053e43b9a6e

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SetIoRateControlInformationJobObject
GetProfileIntW
GetNumberOfConsoleMouseButtons
SetHandleContext
SizeofResource
WerpNotifyLoadStringResourceWorker
GetVolumePathNameA
BuildCommDCBA
ConvertFiberToThread

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 105KB - Virtual size: 126KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE