NEAS[.]65b36b6bd8c847964297af45bd133110[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.65b36b6bd8c847964297af45bd133110.exe
Size

119KB
MD5

65b36b6bd8c847964297af45bd133110
SHA1

cd7c1b74d7ec74c78cc4062e0b737e9875012ea9
SHA256

0092ba7ee10425414b5e8a0c71bfe40a11be046ddbdbd70abdbc965e7ee7c3b7
SHA512

843b3e8470ca43d6d77706a3b65d4ed10c27bebcef788e8313f61ed62dfef3a1fc911328645be711856f1e085cd9af84c61aa1e1e05a33be0a960fec1360bbc4
SSDEEP

3072:eX8y27nJ+sMIveUoqj8q4k+2M+B+B4dOQWS1OiWGP4A:0E+fiVVk1B4dORS1Oe4A

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.65b36b6bd8c847964297af45bd133110.exe

Files

NEAS.65b36b6bd8c847964297af45bd133110.exe
.exe windows:4 windows x86

2e5e274c63505317bb4d6b5321b94972

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

EnumUILanguagesW
_lread
GetUserDefaultLCID
GetSystemWow64DirectoryA
GetVDMCurrentDirectories
CreateProcessA
InitializeConditionVariable
CreateWaitableTimerA
UnregisterWaitUntilOOBECompleted
CloseHandle

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 105KB - Virtual size: 126KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE