NEAS[.]8ffd80960a90335d224ab61f92063ba0[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.8ffd80960a90335d224ab61f92063ba0.exe
Size

119KB
MD5

8ffd80960a90335d224ab61f92063ba0
SHA1

e9532ddefdea4948e1f37d1d678ca4acaefa4f67
SHA256

ae51463c176750167d644566d257ba1b33e7438088274f6312d5de837f7a0888
SHA512

f7b99f42cbcda10e5b4cdba412084e0c913e171315868459b33d09b0fc03e9d89773697c1bacb3347a1e6f75c27154904f14fb459270815eeabbc9e20dddd2e3
SSDEEP

1536:nUhyB8kXMQ8kkGtNmwqes8+KfRIYtG/LqPm/lO/KwuzakNAKWEwSXAyFWxm5SWoy:n1TMFGtNTyNcIYsDb9PzLLwiAsmLnMtT

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.8ffd80960a90335d224ab61f92063ba0.exe

Files

NEAS.8ffd80960a90335d224ab61f92063ba0.exe
.exe windows:4 windows x86

89231d46e9fe6c609421e12ee3493187

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SetTermsrvAppInstallMode
EnumResourceLanguagesW
ConvertFiberToThread
ConvertCalDateTimeToSystemTime
FindFirstVolumeA
GlobalHandle
LoadAppInitDlls
EscapeCommFunction
SetComputerNameExW
SortCloseHandle

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 105KB - Virtual size: 126KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE