NEAS[.]bb0231e063eb73d883e205050f90e3f0[.]exe | Triage

Sharing

General

Target

NEAS.bb0231e063eb73d883e205050f90e3f0.exe
Size

119KB
MD5

bb0231e063eb73d883e205050f90e3f0
SHA1

cda542c131e1e64676b4b28ba835d3d053feb547
SHA256

b68343c50e329224afce2f64be28c6db960fd7961c681b93a1b1f9e115cf5de8
SHA512

386f1f62972cebed00296d825a713fcbafbb304e5834148604a16e26688832784694fff0850294bebcc6a70446f7a0be445f1d97a87392a4bb9fe3c264fafdf7
SSDEEP

3072:ICQKiiJYxfmMwTM3AyjhtQc2ILUsyERq+1PZC:IfiN7M3/bQcBL9yoU

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.bb0231e063eb73d883e205050f90e3f0.exe

Files

NEAS.bb0231e063eb73d883e205050f90e3f0.exe
.exe windows:4 windows x86 arch:x86

a4c447f0d4cdc913bfabf7317ef1a4be

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

K32GetModuleFileNameExW
QueryUnbiasedInterruptTime
GetUserDefaultGeoName
OpenConsoleW
IsValidCodePage
GetModuleFileNameA
GetApplicationRestartSettings
SetEnvironmentVariableW
FindFirstVolumeW
SetProcessDefaultCpuSets

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 105KB - Virtual size: 126KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE