NEAS[.]247098f977cf0103a07ad64757e2f190[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.247098f977cf0103a07ad64757e2f190.exe
Size

119KB
MD5

247098f977cf0103a07ad64757e2f190
SHA1

d12d0cb1f08ee6058427b972fa43c349298edf8c
SHA256

ed2e408e13c907cd7089327967be2ddb4052f963ca86c5f034de812680a47b12
SHA512

d77abe38a25e1a114ee0f95f4f64478fdf0dbb83034280da5b281eb3b59b14124ed1911cb29751b11345016f3d93aa6e188fe1e538e1addd89076bb25d757c2e
SSDEEP

3072:sy9w2ys/Hw4eOAAHbkOjajvZ8/HSAQ5zeAc5C:P13ejAHbkO5/HSl5z5f

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.247098f977cf0103a07ad64757e2f190.exe

Files

NEAS.247098f977cf0103a07ad64757e2f190.exe
.exe windows:4 windows x86 arch:x86

aed4be4f175fe54435d47d59977bdb03

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GlobalAddAtomW
VirtualAllocEx
VirtualFreeEx
RegisterWowExec
SetTimeZoneInformation
LCIDToLocaleName
BasepInitAppCompatData
WriteFileEx
SetNamedPipeAttribute
IsBadHugeWritePtr
SetConsoleHardwareState

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 105KB - Virtual size: 126KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE