NEAS[.]288589aa3caf73066d7b764fecf1e530[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.288589aa3caf73066d7b764fecf1e530.exe
Size

119KB
MD5

288589aa3caf73066d7b764fecf1e530
SHA1

acc4747d974750b822c1dec2986fe3e1a4070936
SHA256

2aae90a841db8e47371fb8b6491a1f3ad57c91a00583dd60b79caf4ea56ddae4
SHA512

c01af7be10277e780adb35c1fc1f77da1589a99ec793836d51d846c8e488be8f476eb17f96ccd421c7d47ce2c7659ea03d2ac34666b8fb4fe5b6e05f860652f0
SSDEEP

1536:ei3oR4rxYJkTtR2044kZ0LIhpy5d+nYDpxIcJyzzLYDWNbsA2Pgt1Vvvnqi8uiCH:s4rSb04leLqQynyxI2y0j61ZqP3mxHl

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.288589aa3caf73066d7b764fecf1e530.exe

Files

NEAS.288589aa3caf73066d7b764fecf1e530.exe
.exe windows:4 windows x86

754409c75ecdec8149a4f2d83d78a465

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetSystemDefaultUILanguage
WriteFileGather
GetNumaProximityNodeEx
GetThreadInformation
DebugActiveProcess
lstrcat
BaseCheckElevation
GetConsoleCommandHistoryLengthW
WerUnregisterCustomMetadata
SetupComm

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 105KB - Virtual size: 126KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE