NEAS[.]f1f86ea3abfe07183c28e8754a3fb6f0[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.f1f86ea3abfe07183c28e8754a3fb6f0.exe
Size

119KB
MD5

f1f86ea3abfe07183c28e8754a3fb6f0
SHA1

36240669e9f6ef1a2d905d386c047a31e145820a
SHA256

a3a70dfc7787f1f08c2f376b0f8fff3c3dc7ff102513cb4c5207ebe91559d80c
SHA512

afc0541281e19674716d0db0b8e65665d80f5ce08a93d722ecfd47620736d0751840f3f9bfec3c526d313ee11beb7dce06c47d80518d824c1b0decedf9fd2f21
SSDEEP

3072:v6b9mkMKFyf5FVUDvkXo/mfEySQIxDnsnwOe9o8Twj6Mwhka:yblM5+DvkXo/MixgnwOe+80j6Zhka

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.f1f86ea3abfe07183c28e8754a3fb6f0.exe

Files

NEAS.f1f86ea3abfe07183c28e8754a3fb6f0.exe
.exe windows:4 windows x86 arch:x86

b27070b5fee880dc5d5fb3ba7341a5cd

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SystemTimeToTzSpecificLocalTime
GetOverlappedResultEx
EnumDateFormatsExW
GetLocalTime
GetCurrencyFormatW
IsValidNLSVersion
GetConsoleProcessList
QuirkIsEnabledForPackage2Worker
AppPolicyGetClrCompat

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 105KB - Virtual size: 126KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE