NEAS[.]9d5e82b01ea9bb2f98a48bbaf3ad6fb0[.]exe | Triage

Sharing

General

Target

NEAS.9d5e82b01ea9bb2f98a48bbaf3ad6fb0.exe
Size

119KB
MD5

9d5e82b01ea9bb2f98a48bbaf3ad6fb0
SHA1

714ede000d16e2f46cd2b88c25da20451cee3846
SHA256

86bec6091d0e2acb1f2073bfbedfa5c4c63213137e9ff8df8c1280aa9f0cc2c2
SHA512

0cb405b11ddf19339895a4f7168ad933e80869a908953ce766e6f7d1892f1673aafb016f8a981b1737cf5240c2d1947de3000a1b60117e620e21029d57fa8ef0
SSDEEP

3072:x3/Dcv2LBHMJnK3ZfgBC76alLNoRwXEDTsb1LHOAIrL:x/DHLeJnKJ4BC7DZkwZ1lIrL

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.9d5e82b01ea9bb2f98a48bbaf3ad6fb0.exe

Files

NEAS.9d5e82b01ea9bb2f98a48bbaf3ad6fb0.exe
.exe windows:4 windows x86

d335fd35dda3b05dccac8b71c7f24a31

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetACP
OpenFileById
TlsGetValue
SetConsoleInputExeNameA
UnmapViewOfFile
SetFileApisToOEM
SetConsoleMode
GetConsoleWindow
VerifyVersionInfoA
RegDeleteKeyExA
GetModuleHandleA
ConvertFiberToThread

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 105KB - Virtual size: 126KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE