NEAS[.]3273aac46d00f12b61210ac984f74870[.]exe | Triage

Sharing

General

Target

NEAS.3273aac46d00f12b61210ac984f74870.exe
Size

127KB
MD5

3273aac46d00f12b61210ac984f74870
SHA1

347c20548f1a525d0392ea553e482d1f176a50cf
SHA256

4a73231afe73597126b241e86d3a6262e076d230168235e4f9522e73d60a5fa9
SHA512

cd2e5d0ac967befdb18f0c4c18de098469ff153e11c89a66e0d1b01bd32da54b506f4a1266680ef2d58da1b47ca5fb4ea55403062a5e6b4b7a0f2a81953d9f4b
SSDEEP

1536:N+9dhB+pWWBhWNNHljhdM5BbbQnJuzmAcS8dLLkqeLkQljIzZRlg8PwNKuYRIW76:i4ngJIXE4qykQRIzrlnoNeKde5fi

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.3273aac46d00f12b61210ac984f74870.exe

Files

NEAS.3273aac46d00f12b61210ac984f74870.exe
.exe windows:5 windows x86

60304a29c85c161cca0a6e2c682d93f3

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ExpandEnvironmentStringsA
EnumCalendarInfoA
DeleteFileA
SetThreadLocale
SetLastError
Sleep
GetProcessHeap
lstrcpyA
SetCurrentDirectoryA
IsDBCSLeadByte
FreeEnvironmentStringsW
CompareStringW
VirtualProtectEx
GetFileAttributesA
TerminateProcess
SetFileAttributesA
GlobalFree
GetUserDefaultLCID
IsBadReadPtr

msvcrt

__set_app_type
__p__commode
atan2
__setusermatherr
__p___initenv
free
_XcptFilter
__p__fmode
_exit
calloc
_adjust_fdiv
_controlfp
_initterm
_except_handler3

Sections

.text
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 1024B - Virtual size: 916B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 8KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 48KB - Virtual size: 120KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE