NEAS[.]a74eb1676dffad81aa157fee916f2ec0[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.a74eb1676dffad81aa157fee916f2ec0.exe
Size

119KB
MD5

a74eb1676dffad81aa157fee916f2ec0
SHA1

0eeae1364eb8aa892bc8d58108212bfda6596d92
SHA256

db295c501f7f50c0f4f1a5b16b96497ace8a990df8ce542f33f11228e643b051
SHA512

db1daa6be1cf42d1f141c26fb1d481d4f059cd732a9648d57ef0c3e6939c07caf90dc6e66648e97e4de0e261d5b2714bf326a41593ea645f282c6bc7b46b0919
SSDEEP

1536:cskn3Z9YiWy+lUwwMKC8nUJ3eraKQGyFAJkVYaUdZJZQWEnyEe0n4cMI/pECSgHT:csknpeiGUVCAe3erFFJFdZrQI+FuC3z3

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.a74eb1676dffad81aa157fee916f2ec0.exe

Files

NEAS.a74eb1676dffad81aa157fee916f2ec0.exe
.exe windows:4 windows x86

8a649e4654fc5154c23c7592edab5074

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

FileTimeToDosDateTime
GetCurrentDirectoryA
FileTimeToDosDateTime
QuirkGetDataWorker
RegSaveKeyExW
AdjustCalendarDate
Wow64SuspendThread
K32EnumProcessModulesEx
DeleteTimerQueue
ReadConsoleOutputCharacterA

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 105KB - Virtual size: 126KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE