NEAS[.]4a6c8db57361c9ad2b091bc8befc6ad0[.]exe | Triage

Sharing

General

Target

NEAS.4a6c8db57361c9ad2b091bc8befc6ad0.exe
Size

66KB
MD5

4a6c8db57361c9ad2b091bc8befc6ad0
SHA1

fac346321199e5931c3c0e695490751a8132cfe4
SHA256

a1465a6c79d927b7c539f74712589dbbf17cf6cc49663918a4f20d6c506e9dcd
SHA512

265d6fb3b2fd391ed76af62dfdbea0032886924ae28c38210ec9a8686104305318c978383a0b55aa59bb4b018c8b7978e90b887333caba996161ead58990909e
SSDEEP

768:SrmZsZxwmP1ap8FZjM39zN2MQuqWl9Tg8IRix8CBcwdLBtaQsnuIxbkgsr2e+YQ/:/szXm67WjIcHcYNsF+gT0QvwXwsA4Q

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.4a6c8db57361c9ad2b091bc8befc6ad0.exe

Files

NEAS.4a6c8db57361c9ad2b091bc8befc6ad0.exe
.exe windows:4 windows x86

b24d4f4691cecdcd9296f299f9fdaa7e

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ClosePrivateNamespace
TransactNamedPipe
ResetEvent
ApplicationRecoveryFinished
AddResourceAttributeAce
SetFileAttributesTransactedW
Wow64Transition
CloseThreadpool
GetNumberOfConsoleInputEvents
UnregisterBadMemoryNotification

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 51KB - Virtual size: 70KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE