NEAS[.]b5fdfc4a8c1818fd9543c8096e3f01e0[.]exe | Triage

Sharing

General

Target

NEAS.b5fdfc4a8c1818fd9543c8096e3f01e0.exe
Size

119KB
MD5

b5fdfc4a8c1818fd9543c8096e3f01e0
SHA1

3e337972fddcdc5f31b17e74df745855add926d4
SHA256

32078845be3541d2a6e5c4a616563366914ad39582ed35a8b3df2b588074669e
SHA512

039cef0e048ca6d6256f9e400d661e0a8ac629bf768aa727fe82e0f088e42a5958c94d73acc0aa55c97e83bbce6c6b1216718754f0057a04b64b0c40a480ba9a
SSDEEP

3072:yKSfUIz5WIHD3HnxmafUgTW0aMBtmne4xd3WP:yhfUIzRzHcafnT/aMBt3AdGP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.b5fdfc4a8c1818fd9543c8096e3f01e0.exe

Files

NEAS.b5fdfc4a8c1818fd9543c8096e3f01e0.exe
.exe windows:4 windows x86

40a1f54652c9ad6000e5ec324aa2738e

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

WaitCommEvent
SetNamedPipeAttribute
OpenConsoleW
WerpNotifyUseStringResourceWorker
BasepProcessInvalidImage
GetNamedPipeHandleStateA
GetConsoleInputWaitHandle
AddVectoredContinueHandler
FindPackagesByPackageFamily

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 105KB - Virtual size: 126KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE