NEAS[.]3a8041725af2d028dbd185587a935420[.]exe | Triage

Sharing

General

Target

NEAS.3a8041725af2d028dbd185587a935420.exe
Size

119KB
MD5

3a8041725af2d028dbd185587a935420
SHA1

44ee0801147dfb7764022376339313e7d7cea02c
SHA256

1b5f7100af3cd24c129b658777b510ae7b26e8c19561ee6196947feb2108fd2b
SHA512

1cec470d915aee3648c99d23af7b951eb398073605bbc704b130239285e6f518546cdfef8b9e1a49b4169900b838b63903e6b2623b67c111457e301ec3bf84ca
SSDEEP

3072:0xtTvTt8R4y8w5esrNXgLjfWBuZS6VjdxP8k3S:gCGzCCS

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.3a8041725af2d028dbd185587a935420.exe

Files

NEAS.3a8041725af2d028dbd185587a935420.exe
.exe windows:4 windows x86 arch:x86

fa9c73474573e7d46764b953e2cf4c14

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetConsoleScreenBufferInfoEx
InitOnceExecuteOnce
GetStringTypeExW
RegUnLoadKeyA
QueryThreadCycleTime
CommConfigDialogA
FindResourceA
CreateTimerQueue
EncodePointer
SetEnvironmentVariableA
VerifyVersionInfoA

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 105KB - Virtual size: 126KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE