NEAS[.]01b96c8456c4d3562ba2a2287b3c6f60[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.01b96c8456c4d3562ba2a2287b3c6f60.exe
Size

119KB
MD5

01b96c8456c4d3562ba2a2287b3c6f60
SHA1

52741821c0a3ce064cb3ebbd4b90389560773e9b
SHA256

4cda12451b05193e0fb32239d2cee08fa49846873a9a8d6720f081bd7d7c2f0d
SHA512

92b195dae09a08fc1de7f04ebdd6799b70dabd8ac8809603c12cf97bda736d162bebf57cdf36dc4d20cc9005ec3b73724fe6632fc48ee3a745dcbd137cf445ea
SSDEEP

3072:OF5b4WZs63FSL5hmt9rUWTgXT06p1MU3bHHlSGJlqIInl6WO:83m63sL5hmt9z8XQfiHMQInllO

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.01b96c8456c4d3562ba2a2287b3c6f60.exe

Files

NEAS.01b96c8456c4d3562ba2a2287b3c6f60.exe
.exe windows:4 windows x86 arch:x86

a06dccbd1c448970fbaca542793d92df

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

RegDeleteTreeW
FillConsoleOutputCharacterA
Heap32ListFirst
FreeConsole
GetPackageFullName
DebugBreak
FlushProcessWriteBuffers
AppPolicyGetCreateFileAccess
LZCloseFile
CreateFile2
GlobalUnWire

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 105KB - Virtual size: 126KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE