NEAS[.]84447966d4c0968750228fec74d8da60[.]exe | Triage

Sharing

General

Target

NEAS.84447966d4c0968750228fec74d8da60.exe
Size

76KB
MD5

84447966d4c0968750228fec74d8da60
SHA1

47397c246afa1bd254f7c0aff33d9bf4331ca6e4
SHA256

1cfb28ffbae4f3189cc0966a4ac7ec6445beb1f2d3e362abb8e64400a1151208
SHA512

4d5a51907f1299e9a3fa93c91433c22dd5404a613c36645f079f1463ad4a3882d215a166012d0a71f908c779f029d5f7b5348111de0aa40711d18b16debbfbea
SSDEEP

1536:zP4B0+Pwh17fM9JLe1aUFDwndydVSjR+CA/9Sg48yy5p:60+Pwh17moxwn7wC4Iy5p

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.84447966d4c0968750228fec74d8da60.exe

Files

NEAS.84447966d4c0968750228fec74d8da60.exe
.exe windows:4 windows x86

769fa12e323a4711e1fc99aca00a1e03

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetSystemDefaultLCID
GetStartupInfoA
RtlUnwind
GetLogicalDriveStringsW
LCMapStringA
FoldStringW
GetStringTypeA
ExitThread
ExitProcess
CreateThread
HeapCreate
GetStdHandle
GetOEMCP

msvcrt

__wgetmainargs
_initterm
memset
asin
__p__fmode
__p__commode
__setusermatherr
_amsg_exit
__dllonexit
_onexit
_wcmdln
memcpy

msimg32

TransparentBlt

Sections

.text
Size: 52KB - Virtual size: 51KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 740B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 20KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ