NEAS[.]a141b1c1cab30c312ce1c137233c5f40[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.a141b1c1cab30c312ce1c137233c5f40.exe
Size

119KB
MD5

a141b1c1cab30c312ce1c137233c5f40
SHA1

2e746e02bc638115e28fbc812370f923f3fe3335
SHA256

e9b4edbfbdf5ca1a5dbf238d8ccdada497289ee369d32d8d67fab06c8039875d
SHA512

8567e798cf22c6100084747f2fb752f31a4b6a234244a588223c9248bb0114622ffb5805119180da085aada27bc26ab97902885c0bd58d4a8e76350aa7834463
SSDEEP

3072:A0l0DjJHTqRLJ2BjSaWpskXSks46gcREeRxEbFNcXVoe8:EDF2WjR6XSX46LvRQFelo7

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.a141b1c1cab30c312ce1c137233c5f40.exe

Files

NEAS.a141b1c1cab30c312ce1c137233c5f40.exe
.exe windows:4 windows x86 arch:x86

5e094841dfe062ee4d9c69b35105bfaf

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

AllocateUserPhysicalPagesNuma
SetThreadSelectedCpuSets
WritePrivateProfileStringW
SetProcessDefaultCpuSets
TryEnterCriticalSection
GetSystemPreferredUILanguages
SetCommTimeouts
FatalExit
GetNamedPipeClientProcessId

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 105KB - Virtual size: 126KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE