NEAS[.]1e9b90946026a123dbbacecf4ec7ebe0[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.1e9b90946026a123dbbacecf4ec7ebe0.exe
Size

119KB
MD5

1e9b90946026a123dbbacecf4ec7ebe0
SHA1

4f7865107939cd2217176782f76f4c4492eb2b5d
SHA256

e7ee39d8245932ec08b81022598fede39d2a8a7c6f1b21b126b755fb26506236
SHA512

69adc4c8aacc912aa7c558fd980aca23e9b21012f18b9ef6c2f380bc32705caa9c149347dc855ad415c7bddd784c07adde3348ed432875fff613f852b5ada511
SSDEEP

1536:W/eF0rTWPAYMMAhz7ib6hWzzbHcdONAywhSg4hsTz5Fc+OvCcUm0hZ27LOhqHcn3:Wbi4qbFzHPLw4gfTzMQXhZcLOhx2fSm8

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.1e9b90946026a123dbbacecf4ec7ebe0.exe

Files

NEAS.1e9b90946026a123dbbacecf4ec7ebe0.exe
.exe windows:4 windows x86 arch:x86

599f61d9d209d106f3ec544c35bc670a

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SetTapePosition
CloseThreadpoolCleanupGroupMembers
CreateBoundaryDescriptorW
GetNLSVersion
GlobalReAlloc
EnterSynchronizationBarrier
DeleteFiber
RegRestoreKeyA
CopyFileW
WerpGetDebugger
InitializeProcThreadAttributeList

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 105KB - Virtual size: 126KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE