NEAS[.]8b8ce717c97733ca07dce403a48bdad0[.]exe | Triage

Sharing

General

Target

NEAS.8b8ce717c97733ca07dce403a48bdad0.exe
Size

119KB
MD5

8b8ce717c97733ca07dce403a48bdad0
SHA1

4c8a3cf769910e12c0c954b720559baa81cbbd16
SHA256

e6912f76b9c8f776e3f8f9355443335a8ae9e421dbe741a6a83d00e2ad577464
SHA512

8031d35f345e3b5f12bded73d3645ff706689a2ce673680b42ab130345181e3a2ab3fcc257f1dc5817deb6ed1455e10a20ae0cd6fdde32199a29b0eea90864f2
SSDEEP

3072:noB5KUfKi8UB0E7jz99IUzIy9LMHbukXtx3s5h:noBqi83EPLIaPL0hXD3s5h

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.8b8ce717c97733ca07dce403a48bdad0.exe

Files

NEAS.8b8ce717c97733ca07dce403a48bdad0.exe
.exe windows:4 windows x86 arch:x86

31a7147a059e660c4c45e1855f00df77

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

Toolhelp32ReadProcessMemory
BaseWriteErrorElevationRequiredEvent
GetDriveTypeW
GetErrorMode
VerifyConsoleIoHandle
VirtualAllocExNuma
RemoveDirectoryW
DosDateTimeToFileTime
lstrcpyA
ReleaseActCtxWorker

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 105KB - Virtual size: 126KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE