NEAS[.]f8ff7a3384a3ee6d3ed5c8e1621f15b0[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.f8ff7a3384a3ee6d3ed5c8e1621f15b0.exe
Size

119KB
MD5

f8ff7a3384a3ee6d3ed5c8e1621f15b0
SHA1

b509e18a6a7cdef0c579906ed0a348608b29ab65
SHA256

22400cc1a61697a51d15bbd081c20195ca86c5712f6d1390fe276f23584e02ac
SHA512

bddc1cf1bae9cfbae431dfb29ecdfa2c84f99ad8644c6a399048fbb500fe7081333f26c34998370af06decde856ce1db6f17f749f8eca50170b51c35dceb5775
SSDEEP

3072:QSBokcmwbfulL2sE7Oy7ACgqqtFqcOzr+:NBTRC2lLY7QCgqeFc+

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.f8ff7a3384a3ee6d3ed5c8e1621f15b0.exe

Files

NEAS.f8ff7a3384a3ee6d3ed5c8e1621f15b0.exe
.exe windows:4 windows x86 arch:x86

b615f0f4e6a177f99815a758a89a2495

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

OutputDebugStringA
ClosePackageInfo
UnregisterApplicationRecoveryCallback
GetFullPathNameA
QueryThreadpoolStackInformation
CloseThreadpoolWork
WritePrivateProfileStringW
WriteConsoleInputVDMW
lstrcmpiA

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 105KB - Virtual size: 126KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE