NEAS[.]e37411dce81822f868bc3957fce38890[.]exe | Triage

Sharing

General

Target

NEAS.e37411dce81822f868bc3957fce38890.exe
Size

119KB
MD5

e37411dce81822f868bc3957fce38890
SHA1

debc31effb0a3602e0737d79b4d5897e04bf7de1
SHA256

340ea5e30067cc609d4719361e562a9d03fb15de37140665561bf0bdd3779f34
SHA512

da7bbda35a5e3e7d871fbea9b52968017a46d7bb8c05cedc891b152889e76d1e3d43d093bc214f317ae4427d6747e2b4031365b8bf3fa20590d7456522da742a
SSDEEP

3072:ln90fXK50XjdqoyQv7nb+9rLJDhqIXPU7p:day0Xjh7y9riIIp

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.e37411dce81822f868bc3957fce38890.exe

Files

NEAS.e37411dce81822f868bc3957fce38890.exe
.exe windows:4 windows x86 arch:x86

c37834bef6e2b0fa6e79590d44a6058d

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetComputerNameExA
RestoreLastError
GetFileSizeEx
ClearCommBreak
SearchPathA
WTSGetActiveConsoleSessionId
ReadConsoleW
WaitForThreadpoolTimerCallbacks
GetVersionExA
GetThreadContext
DisassociateCurrentThreadFromCallback

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 105KB - Virtual size: 126KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE