NEAS[.]28418c1b04511d90e37f138ff79022a0[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.28418c1b04511d90e37f138ff79022a0.exe
Size

119KB
MD5

28418c1b04511d90e37f138ff79022a0
SHA1

bf4ddd14d947bacbbd1cfd159cb27955fb13eaaf
SHA256

5af987ae8113ea477ab43ab5bd1c1c3d8a0f3308f7c1fe0074174263ebb6edac
SHA512

ecbfcc67085074c4cb85e4affb715670687556f6ed8944ec3d9b90bc12b5da08758facddbbac295c9cfedeb5d53105ce4a4f76f3e11464a7ca4b4e3d17eb2437
SSDEEP

1536:sduZd8kVVUopGGQkAalUmQchJlTLmWPvp9cEob4kaZ0X3BBGma3tvYR6LRKTgNVi:S+35scpJlTLTPDcExv+RBGmadgR5UI

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.28418c1b04511d90e37f138ff79022a0.exe

Files

NEAS.28418c1b04511d90e37f138ff79022a0.exe
.exe windows:4 windows x86 arch:x86

195d782652a4e3061b0381d3d861744b

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SetNamedPipeHandleState
GetNumberFormatA
GetThreadIdealProcessorEx
DosPathToSessionPathW
WriteConsoleOutputW
QueryFullProcessImageNameW
GetNumaNodeProcessorMaskEx
WriteConsoleA
NlsGetCacheUpdateCount

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 105KB - Virtual size: 126KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE