NEAS[.]e97464341fa4bef2ba2c9b04f0c1fbf0[.]exe | Triage

Sharing

General

Target

NEAS.e97464341fa4bef2ba2c9b04f0c1fbf0.exe
Size

119KB
MD5

e97464341fa4bef2ba2c9b04f0c1fbf0
SHA1

90e2a76ff71563d98be89b33f90a105a2fa0bdbd
SHA256

f32c5b5abaaff7d6ac294269797342b2103810d89521b1bede41c3aa7344cb25
SHA512

9e1a792132239ffc4e6b87bbea5ebfd5b7087bca2a620147dd22949dc07c8c80b3eec4f1d748f24a4bf9661e20392513d2dfc3ee3954ff511f65c69cf368b373
SSDEEP

1536:pGbLCv5edgH6Q5SPRH1KIBbJTTLXwogK1sbOweHM+9uwPZPAsTK9EZmcAwkHhKoB:kbLW5eYGPpwIB1T7wjK2gsNizmCmccHl

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.e97464341fa4bef2ba2c9b04f0c1fbf0.exe

Files

NEAS.e97464341fa4bef2ba2c9b04f0c1fbf0.exe
.exe windows:4 windows x86

e56811e3146c92860d19903570cb3128

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

VerLanguageNameA
GetAppContainerNamedObjectPath
TerminateProcess
InterlockedPushListSList
GetConsoleScreenBufferInfo
EnumResourceNamesW
InitAtomTable
SetCalendarInfoA
Process32FirstW
CreateMemoryResourceNotification

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 105KB - Virtual size: 126KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE