NEAS[.]3160f3cfc09e04e17f52a57faa4347a0[.]exe | Triage

Sharing

General

Target

NEAS.3160f3cfc09e04e17f52a57faa4347a0.exe
Size

66KB
MD5

3160f3cfc09e04e17f52a57faa4347a0
SHA1

35f4bf42b622c39f42d3fe5012bced049ea920f0
SHA256

16f5fe02ad737374d898da8d774e01518b42c71e9b4e73c4e7c3ea61616aa296
SHA512

988e193da0fc26e50de0fd48d4d5457e41ae4468713d9ab5872ddecf8c32cf418e5772658cd02c3db1667b25e531807293d0c97fc93d874cdc9029e07e1b7fdf
SSDEEP

1536:wzVUZmEibzDhqOMQoQJSnjjA/vcpTEvkwMv3tldzaK6ZWJAEqDLm:albzsQJSng/Wmm3tfOWJAEqDC

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.3160f3cfc09e04e17f52a57faa4347a0.exe

Files

NEAS.3160f3cfc09e04e17f52a57faa4347a0.exe
.exe windows:4 windows x86

f21bee60e6165d2873c9b26ad77d0b2c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

EnumCalendarInfoW
GetProfileIntA
BasepProcessInvalidImage
DiscardVirtualMemory
RegQueryInfoKeyW
lstrlenW
SetEventWhenCallbackReturns
AllocateUserPhysicalPagesNuma
CreateConsoleScreenBuffer
GetFileAttributesTransactedW

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 51KB - Virtual size: 70KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE