NEAS[.]7e8f8cb8493251ec2e2bf46e8e094620[.]exe | Triage

Sharing

General

Target

NEAS.7e8f8cb8493251ec2e2bf46e8e094620.exe
Size

119KB
MD5

7e8f8cb8493251ec2e2bf46e8e094620
SHA1

44108258ead0a91f1856b9a01d038f8176c9551d
SHA256

7f47fe477704841af0354436262258d381469db37281700c53a0e9eceeb9ed00
SHA512

1a251533adecdf565d4ab0bcae9ae303adb6c63435424b565cf05eabd8605972b8b600e58513883d0e181e6dbaa4bf7a691aeabd1bbf5902088ced46f5d2427f
SSDEEP

3072:9/7iPJHanff9mWxj6Qya15afI4zdzbfIEw9mq8td0Ci3P1VYY:9DiPJyffkW56dI8DGpoOb3P1VYY

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.7e8f8cb8493251ec2e2bf46e8e094620.exe

Files

NEAS.7e8f8cb8493251ec2e2bf46e8e094620.exe
.exe windows:4 windows x86 arch:x86

01a71680bd529d3e54b3cd1a6b1b5440

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetTimeFormatWWorker
ExpungeConsoleCommandHistoryW
K32GetProcessMemoryInfo
AppPolicyGetShowDeveloperDiagnostic
RtlZeroMemory
lstrcmpW
GetCurrentConsoleFontEx
GetProfileSectionW
UnlockFileEx
GetConsoleProcessList

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 105KB - Virtual size: 126KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE