NEAS[.]ee111f57960f6af36829339ce5f23fe0[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.ee111f57960f6af36829339ce5f23fe0.exe
Size

119KB
MD5

ee111f57960f6af36829339ce5f23fe0
SHA1

6e1d2486a38a0ed8b3ac8a485ff7884783f0fe34
SHA256

3bc7f662ba8c25de619d09f4dd26e7a472993e3334d81f6cdeff1a035c1193dc
SHA512

e8dca4657bd9d1a96a9324b6c2925d60464e95861966342a2b221a6d878a0ca250ca2aed5c7021c6a43ec31b4463ad4ad50d63395f8337fbf4d206ca6171c317
SSDEEP

3072:j2c4tgs17uBS1sS0qQ7dfMgnf5j6kheHz:qxGwuBYsS/Q9uHz

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.ee111f57960f6af36829339ce5f23fe0.exe

Files

NEAS.ee111f57960f6af36829339ce5f23fe0.exe
.exe windows:4 windows x86 arch:x86

303cf8b0e35a01ed54b381c19555f2dd

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SetThreadpoolStackInformation
GetNamedPipeInfo
GetNamedPipeAttribute
K32GetWsChanges
SetFirmwareEnvironmentVariableExW
ReleaseMutexWhenCallbackReturns
CancelIoEx
FlushConsoleInputBuffer
GetConsoleInputWaitHandle

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 105KB - Virtual size: 126KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE