NEAS[.]2358a4ba4fbe3b3c682433e61b4d4e90[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.2358a4ba4fbe3b3c682433e61b4d4e90.exe
Size

119KB
MD5

2358a4ba4fbe3b3c682433e61b4d4e90
SHA1

2a5576f3e169086bf90f75261026b530d8422f48
SHA256

a32bf528525403c4e463dd4282e8da5b6ad3bfbf05cbea956eb135451fcb0ed6
SHA512

f11dc3f840993a3df8767ac1ad5448328cd0d832af8747af0109a2d7a3360d5ea5d646969b2e36a1596dc94d17b1069545b65fd1d7bc7b3caa196f4f1b0a4f79
SSDEEP

3072:sIqLlNIGkhKVNkxUgPF+ymG8WkXJ5foN0/RshIHuMJnUM:LqZNoKNkxUC8/XJR3ahIOMJn5

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.2358a4ba4fbe3b3c682433e61b4d4e90.exe

Files

NEAS.2358a4ba4fbe3b3c682433e61b4d4e90.exe
.exe windows:4 windows x86 arch:x86

58d26843878e8029b38ccfd28eb6a3f4

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetCalendarInfoEx
GetThreadInformation
ClearCommError
InitializeCriticalSectionAndSpinCount
WerUnregisterFileWorker
ReleaseActCtx
GlobalSize
DefineDosDeviceA
GetUILanguageInfo
PulseEvent
QueryActCtxSettingsW

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 105KB - Virtual size: 126KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE