NEAS[.]1b0a55b633c2c167972a917d80b657f0[.]exe | Triage

Sharing

General

Target

NEAS.1b0a55b633c2c167972a917d80b657f0.exe
Size

119KB
MD5

1b0a55b633c2c167972a917d80b657f0
SHA1

e9e2d7bb3789117032a58ebc70fba9e92eb8064c
SHA256

89321fbcffd816b1907f9d345fd9c18f3614db58bee538d815e9eb9e17665e1a
SHA512

a0253eb62b3cfb28591440a2cb1944d3cdb25ad91d6978e829421e18d651a93420fbf538c9f55453b13f0c065f995b1c3c93464ff3e446d2caa2cab1a67bdcc6
SSDEEP

3072:BUzq32coO1Nz1DytTDI+mdtO2AUwddK3nXeOHKg8U1VljQm:BlGgnzAt+u2Nw349MU1fl

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.1b0a55b633c2c167972a917d80b657f0.exe

Files

NEAS.1b0a55b633c2c167972a917d80b657f0.exe
.exe windows:4 windows x86 arch:x86

7d8328a885a5e1d2540259920adb41fa

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SearchPathA
Heap32ListNext
NlsUpdateSystemLocale
LZClose
TermsrvOpenRegEntry
GetNumaHighestNodeNumber
ConvertNLSDayOfWeekToWin32DayOfWeek
WerpGetDebugger
SetProcessWorkingSetSizeEx
SetCalendarInfoW

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 105KB - Virtual size: 126KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE