NEAS[.]22ab86a7394bdd2d42dbd97141886920[.]exe | Triage

Sharing

General

Target

NEAS.22ab86a7394bdd2d42dbd97141886920.exe
Size

119KB
MD5

22ab86a7394bdd2d42dbd97141886920
SHA1

ebe0e844c0ab2f5c6170d2118f461e557101a8be
SHA256

441380e9856ef5e78696ef0f2d5e7f7cfb516b8f22978cbd6c66f6323d7ef346
SHA512

2a84a99b8bac930147ada1341db61b311f6132865476382a3bdc9a1b5d12c7a109f773944ff0785dc5ae2c9783b9c5abd8c3cda11f33ee88eef809ddda4484a7
SSDEEP

3072:GfDL0Sf1UU+XUKC/m26JiLhg0xZxfxMoWGpN:MNfK6e+ZxfxfVpN

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.22ab86a7394bdd2d42dbd97141886920.exe

Files

NEAS.22ab86a7394bdd2d42dbd97141886920.exe
.exe windows:4 windows x86 arch:x86

f55e16d012bdfe3ebaf696127b7843d2

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

TermsrvGetWindowsDirectoryA
CreateWaitableTimerW
GetConsoleAliasExesW
EnumDateFormatsA
SetPriorityClass
RegDeleteValueW
FindFirstVolumeMountPointW
CheckElevationEnabled
GetTickCount
GetConsoleAliasesA

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 105KB - Virtual size: 126KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE