NEAS[.]191f3326ce6a5459ed2a4dd03c095b00[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.191f3326ce6a5459ed2a4dd03c095b00.exe
Size

119KB
MD5

191f3326ce6a5459ed2a4dd03c095b00
SHA1

3bacd99085c9be4288e50a764e2138a2a60a1ba2
SHA256

b601aa2902fdab47e3d26401c4bb0a90c4cc2f6ca5329fb6f2fe2a1a4eace19a
SHA512

08ad24085a4d5b17cdc58046a6b067214a5639586a7e458437b093547402d0c796c633e2e4eefbe2622e39d97ffe19fc6b1c364d1ef47727258565f260ad331a
SSDEEP

3072:On6o8o9rAhpnc3tmMuBhIHr8zX0aY1goQCe:On6o8o9AnkmMuYgzX00hX

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.191f3326ce6a5459ed2a4dd03c095b00.exe

Files

NEAS.191f3326ce6a5459ed2a4dd03c095b00.exe
.exe windows:4 windows x86 arch:x86

c08315f3492b7dfa807ca0d3713355ce

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetConsoleOutputCP
GetConsoleAliasExesW
K32EnumDeviceDrivers
AddLocalAlternateComputerNameA
BasepCheckWebBladeHashes
AppPolicyGetThreadInitializationType
AddDllDirectory
GetCurrentThreadId
SetConsoleCursorInfo

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 105KB - Virtual size: 126KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE