NEAS[.]a24b90031d7e968eb1f065dd977dd010[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.a24b90031d7e968eb1f065dd977dd010.exe
Size

119KB
MD5

a24b90031d7e968eb1f065dd977dd010
SHA1

03252987e674d91bd71308685397d62da4a780dc
SHA256

941dc75ab9266b00c4ca14b8dee750f154843f6f32dbf8e1017905595ee25f5b
SHA512

9358165647460359037479c85ee1ae484557251284516c1bcff60bdb7acf1e30329db04101281397dc8aefd2cc36957cf334f996ec19e3fc12344a53974101a2
SSDEEP

3072:3wMlNmliNWYiSEZdiVKyMKAAQmmVwf1fauKgZsW:NlvNrEZdiVx9iX+f1fogaW

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.a24b90031d7e968eb1f065dd977dd010.exe

Files

NEAS.a24b90031d7e968eb1f065dd977dd010.exe
.exe windows:4 windows x86

a0e1e57613fb11d2e8fde7468d9033ea

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LZInit
FindAtomW
SetLocaleInfoA
GetModuleHandleExA
GetConsoleAliasExesA
SetConsoleFont
LocalSize
GetCalendarSupportedDateRange
OpenPrivateNamespaceA
EnumDateFormatsA
DosPathToSessionPathA

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 105KB - Virtual size: 126KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE