NEAS[.]13dd17d11f7a82f0e86d5ed7d5f7a040[.]exe | Triage

Sharing

General

Target

NEAS.13dd17d11f7a82f0e86d5ed7d5f7a040.exe
Size

119KB
MD5

13dd17d11f7a82f0e86d5ed7d5f7a040
SHA1

3f797eca5e43fce1a2573e849af248fe079130c7
SHA256

1596a6b98e16c4800530ba1d5c8c273c2b9b86b95c8a4e3dfcf12b1098872b1f
SHA512

80c95611a19aa5e742afee83cabe7ed6e25c58ae79c158dbad06d1f16d35ebdeb7696a2cda75d4d714052f64f1cae1e78c7685c607c6d8e928db7028f1d4ab22
SSDEEP

1536:gKPqK9xiB0rjOMv2P3xc6wpjT3T9UEZ7WdX1LkGrybXLwlbgKC0+BHGqfk1vNuQ:g8lxtiMyspf3T9UE1wrybXUlEKtqfkzv

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.13dd17d11f7a82f0e86d5ed7d5f7a040.exe

Files

NEAS.13dd17d11f7a82f0e86d5ed7d5f7a040.exe
.exe windows:4 windows x86

1ca7f8e0c1e17458eeffec2b21dbc39d

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

AddDllDirectory
SetEvent
EncodeSystemPointer
ReOpenFile
GetThreadPreferredUILanguages
Wow64GetThreadContext
GetComputerNameW
IsBadCodePtr
CreateMutexW
CreateProcessW
EnterCriticalSection

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 105KB - Virtual size: 126KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE