NEAS[.]3e9df2ac12c9370dddbf5c0d8bffad90[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.3e9df2ac12c9370dddbf5c0d8bffad90.exe
Size

119KB
MD5

3e9df2ac12c9370dddbf5c0d8bffad90
SHA1

0513c6994e2195fb11d11a0cdd9a0fd82aa1055e
SHA256

f5e305d17f5396ab007ced9bf960cf85ee648b24d471484b31b02338f9e6e340
SHA512

f7f4e2f71b751bf3a08d260f397f4ec533b1ddf3935d0eb236ec138cb084e902efcba5af9f2e57955cce36ae2f0ed6d024a8020ce93cf3f5f4f0e871a88a9b2e
SSDEEP

3072:SxQB3/Ey6D7sU4Pk+ctR+8oy6chRn6PC5Qvkm:SmB3MjD7snM56Mnzavkm

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.3e9df2ac12c9370dddbf5c0d8bffad90.exe

Files

NEAS.3e9df2ac12c9370dddbf5c0d8bffad90.exe
.exe windows:4 windows x86

f54227395af250003e98895799185b74

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetCalendarInfoA
InterlockedCompareExchange64
GetSystemDEPPolicy
GetPrivateProfileStructW
GetSystemTimePreciseAsFileTime
GetNamedPipeClientComputerNameW
GetCurrentPackageInfo
CreateEventExA
GetAtomNameW

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 105KB - Virtual size: 126KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE