NEAS[.]9a2a44facc48c3bf92d5124f58ee52d0[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.9a2a44facc48c3bf92d5124f58ee52d0.exe
Size

119KB
MD5

9a2a44facc48c3bf92d5124f58ee52d0
SHA1

7e43f1a90317fb0e59bfd0b1d8865a216d847ae8
SHA256

6c601b59f7bf49dbf613dc2caaf8d14b8c317b485253066d6382680d15784ffe
SHA512

ed5aaa3e1b9da4a02fdabc38e39b3897f83260bd3600baf83be7c55ac6fff1cc701e81d7a7d8444d83ab77a3ca2cd77595f990d2d8ae452a34f6a2fb8ee9b8e8
SSDEEP

3072:wdOHXiDlWHucsmFiICagaDKGJ4nm0JM5mvXA/GqtlfX9w8BI:pSgC7xatXp5gXlqhfI

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.9a2a44facc48c3bf92d5124f58ee52d0.exe

Files

NEAS.9a2a44facc48c3bf92d5124f58ee52d0.exe
.exe windows:4 windows x86 arch:x86

c1495e63d720602b14cb7fa3040ffac2

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SetFirmwareEnvironmentVariableW
CreateRemoteThreadEx
GetNamedPipeClientComputerNameW
ReadConsoleOutputA
InitializeSListHead
RegDeleteTreeA
K32GetPerformanceInfo
SetVolumeLabelA
RegEnumValueW
WaitNamedPipeA

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 105KB - Virtual size: 126KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE