NEAS[.]4afbb2199aaac3d5100712598fcfef90[.]exe | Triage

Sharing

General

Target

NEAS.4afbb2199aaac3d5100712598fcfef90.exe
Size

66KB
MD5

4afbb2199aaac3d5100712598fcfef90
SHA1

368e2ddc99a2bc5899afbac84d9346c7ef222f6b
SHA256

a6143cd1e58696c095c87658d5bd259836d1aa93743507164311762d76d48e53
SHA512

9740e465ce8a9f665ad0addf2e705777726353a4906732c8f238d1dc95130297b21586f3505ae6de44c2c06b87362f893f8997b862974271a62b709f2339acf9
SSDEEP

1536:YZiRyxqEN9jAR8J3AQ9UedtkNnZskGQr3B+hjGTnsGnB1nqSBTNpP0g:Iis9uWzWcSNnR38hwjn/nRTPMg

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.4afbb2199aaac3d5100712598fcfef90.exe

Files

NEAS.4afbb2199aaac3d5100712598fcfef90.exe
.exe windows:4 windows x86

0e589b00fdfbcb3bb30c708ac96b5c13

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetDllDirectoryW
SetProcessAffinityUpdateMode
CheckForReadOnlyResourceFilter
SetConsoleOutputCP
GetVDMCurrentDirectories
CreateSymbolicLinkA
TermsrvOpenRegEntry
GlobalAddAtomW
CreateActCtxW
RaiseInvalid16BitExeError

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 51KB - Virtual size: 70KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE