NEAS[.]41b6e174c7369ab8062fc79305e2b710[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.41b6e174c7369ab8062fc79305e2b710.exe
Size

119KB
MD5

41b6e174c7369ab8062fc79305e2b710
SHA1

2a6f4ff690549d5c1b3907e047d192015dabbd35
SHA256

f533f8d2922b21f137a79ead8d481922560ff055520fd111b1574c558107760b
SHA512

ac36113555c84413bd99eeb5dd9ac9f3c0bbc975687bbec3b7b4ec054da2ca2b5f216e9a482ad81ccdce51241f436d9cb6eb9ab3e5408f284d82ce1e829b2050
SSDEEP

3072:VR8denWrVNXxyDquEBKNnlITS+rhiK2Kv:zXnWrVNMHPIOQXv

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.41b6e174c7369ab8062fc79305e2b710.exe

Files

NEAS.41b6e174c7369ab8062fc79305e2b710.exe
.exe windows:4 windows x86

c6127ff596e4f8234a9654afa5969fd4

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SetInformationJobObject
CreateWaitableTimerW
GetDateFormatW
SleepEx
GetThreadPriority
RegDeleteTreeA
CancelIo
FoldStringW
EnterSynchronizationBarrier
FillConsoleOutputCharacterW
AppPolicyGetWindowingModel

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 105KB - Virtual size: 126KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE