NEAS[.]8de1bfaf9801bbfb2d641923cb471110[.]exe | Triage

Sharing

General

Target

NEAS.8de1bfaf9801bbfb2d641923cb471110.exe
Size

119KB
MD5

8de1bfaf9801bbfb2d641923cb471110
SHA1

5f9378e6e3a5409449b37f275809f3440d15bba5
SHA256

f67e26e62e802e40142579a9cf3f03421e60086e606a24d3dd7173e45fd7a26d
SHA512

e769b6d6b0a8dedc61e2bee673db7e88ae0dbdd2a83d7c6f2608b86c05362c575bd2b81a2f0a54fd1377a260ec66c91c7044323b66103300526babc2c046ba32
SSDEEP

3072:cbHej4rScrEUAmlbr/R1JEeciqZFylgJjjBnh2gyq489a8SZ+CMbNSvaeQ/ATyt:IgJagb4Eadl6NSvMS6

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.8de1bfaf9801bbfb2d641923cb471110.exe

Files

NEAS.8de1bfaf9801bbfb2d641923cb471110.exe
.exe windows:4 windows x86 arch:x86

98f8541782ed396780937add2d5927a6

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

BaseIsAppcompatInfrastructureDisabledWorker
CreateWaitableTimerW
ReadConsoleOutputA
SetConsolePalette
InitializeCriticalSectionEx
CreateFileMappingA
RegUnLoadKeyA
BasepAllocateActivationContextActivationBlock

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 105KB - Virtual size: 126KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE