NEAS[.]7a8e5b3dd7dfef2154f5529495b7d9c0[.]exe | Triage

Sharing

General

Target

NEAS.7a8e5b3dd7dfef2154f5529495b7d9c0.exe
Size

119KB
MD5

7a8e5b3dd7dfef2154f5529495b7d9c0
SHA1

22e3a03d655fbd1c616293c9c24d727385b54c8e
SHA256

66bcc4f3681a06e6b67995c35ab71eb567380c6426a91b2193549f28863dba9e
SHA512

0ab1a853738ed737ff4b3df7ab07ace000ae5f03024b2574a8f3d7ab4d9cfc8a31abc12867a8edae0a7221073908de66f551eb1038c8f5b8f77c6355ac5f6781
SSDEEP

3072:5Ds5n1NtdHaJ+soKUdOZJ0O2cgdbziKMz7QYiDlcGmgMoIU:1sRHM+sobOZJ0OVBNz0YpGmgBF

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.7a8e5b3dd7dfef2154f5529495b7d9c0.exe

Files

NEAS.7a8e5b3dd7dfef2154f5529495b7d9c0.exe
.exe windows:4 windows x86

6931c5e86c32a76cff3bf5bab4b9e49f

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateMutexW
GetConsoleOriginalTitleW
GetPrivateProfileStructW
WaitForDebugEvent
WerpNotifyLoadStringResourceWorker
CeipIsOptedIn
RemoveSecureMemoryCacheCallback
K32GetWsChanges
IsDBCSLeadByteEx
Wow64Transition

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 105KB - Virtual size: 126KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE