NEAS[.]674afeb4e218ee8142d50fd5b7f36da0[.]exe | Triage

Sharing

General

Target

NEAS.674afeb4e218ee8142d50fd5b7f36da0.exe
Size

119KB
MD5

674afeb4e218ee8142d50fd5b7f36da0
SHA1

53139bc73828901957d7c805e56c3360e1ffb75d
SHA256

0930b741adbb9728df2c93053d82506f57e34c1d5f7191c4d693696bf2943e21
SHA512

f893bced3e6bcaa9dd94f8c6b22f3c3940201a2db758f60118d11f48982bdcfaa8c3e6101328b39e74648fe7a8e0ba66774c0936ebb41de524fcacf9534d1597
SSDEEP

3072:dirCs4IPv2M/fVbM4KIaMsy02f3/y/Wz7Rx+L:dimfE2MlftaS13y/W5x+L

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.674afeb4e218ee8142d50fd5b7f36da0.exe

Files

NEAS.674afeb4e218ee8142d50fd5b7f36da0.exe
.exe windows:4 windows x86

200ded626d580c38fd36631f2ba16978

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

QuirkGetData2Worker
GetCommModemStatus
GetEncryptedFileVersionExt
HeapCompact
GlobalFix
QueryProcessAffinityUpdateMode
OpenJobObjectW
ReadConsoleOutputW
FindActCtxSectionGuid
RegDeleteKeyExW

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 105KB - Virtual size: 126KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE