NEAS[.]b4d26bfd365112cef87754bc2af6ccd0[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.b4d26bfd365112cef87754bc2af6ccd0.exe
Size

119KB
MD5

b4d26bfd365112cef87754bc2af6ccd0
SHA1

78593eedbbb0f1431fd7b2827cce7e3961bcfd89
SHA256

cab1dbced1a5602d435645bb56450ad2d71acd31ddb5a363ebc82b95b345461f
SHA512

396cf6f791816de62aac6fd73b4e995f4d92a9d3c241e6941411817294a29e66772687b5f5c46fc7878dd064b304b09329bf10e2d694ebb04f3c8bb85db0ce73
SSDEEP

3072:8EIBNfzx2g2sx8d87YVf0Kmcnw8IzN5545+vVZ+3RqByKUi6:8RLxT8a7YUp3vVZGyUi6

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.b4d26bfd365112cef87754bc2af6ccd0.exe

Files

NEAS.b4d26bfd365112cef87754bc2af6ccd0.exe
.exe windows:4 windows x86

f9edefbfacd9bee5bcc3e4eae02336ed

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

IsWow64Process
GetBinaryTypeW
InterlockedDecrement
ExpungeConsoleCommandHistoryA
RegDisablePredefinedCacheEx
Sleep
SetEnvironmentStringsA
RegSetValueExW
HeapAlloc
SetHandleCount
WaitForSingleObject

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 105KB - Virtual size: 126KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE