NEAS[.]52d25e87e7214f6d0f4920db8f092b20[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.52d25e87e7214f6d0f4920db8f092b20.exe
Size

119KB
MD5

52d25e87e7214f6d0f4920db8f092b20
SHA1

b051edfc18fc7fa52e6c451f22ad84ed0d1e6fc1
SHA256

5dab5f95a10e3f54b3961cae4a5cbc30975aa576bea18bfc07fa10ef1e76e354
SHA512

49d15246baa5605316ca888dfc4962486e0ccef51758c3208e4038fff1bb90c353dbcb6f5a30af25c9b7c69623a199a32115a17473dbd2f597879b4df61ef8b2
SSDEEP

3072:4DcAIOIr4itmtHKlOLrQzGsj+J6EtFjOEvobLQ:KcAIOIRezYie+J6ErqEvCLQ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.52d25e87e7214f6d0f4920db8f092b20.exe

Files

NEAS.52d25e87e7214f6d0f4920db8f092b20.exe
.exe windows:4 windows x86 arch:x86

60d60e40e8ff790a36bc3ff1a072fcbc

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SetFirmwareEnvironmentVariableExA
BasepMapModuleHandle
LZCreateFileW
AllocConsole
GetNumaProximityNodeEx
ApplicationRecoveryFinished
ReplacePartitionUnit
CreateHardLinkTransactedW
GlobalHandle
GetConsoleInputWaitHandle

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 105KB - Virtual size: 126KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE