NEAS[.]911ce773ebeb8f9e8eeb8e140216ce60[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.911ce773ebeb8f9e8eeb8e140216ce60.exe
Size

66KB
MD5

911ce773ebeb8f9e8eeb8e140216ce60
SHA1

bcaa29d64e1a372f7971adb9bc3eb16daae4151e
SHA256

868a2fce552c754b87fe32e024fa7eaac9cf398b281debfa8608a1779097d514
SHA512

5da7f806f47b74d7a83d3b6775d7266a56418b68fa30391b9abd9e00e519627695c8f3762c7c43513f531df9c5f02dc7c2115e4ae4718a4f651d79464f26db98
SSDEEP

1536:6ZCYak1jAc6Prk0HembXReJq+sB9NjR0IjL0P+L0HkrCz/xw:6b+NAmemT0JqXzNjyMYH4C9w

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.911ce773ebeb8f9e8eeb8e140216ce60.exe

Files

NEAS.911ce773ebeb8f9e8eeb8e140216ce60.exe
.exe windows:4 windows x86

fd58fc2ed89c9f98796bf4b7c55a5793

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

WinExec
GetWindowsDirectoryA
FindFirstFileTransactedA
BaseElevationPostProcessing
LocateXStateFeature
RegQueryValueExW
WerUnregisterFileWorker
GetTempFileNameW
CreateDirectoryA
GetNumberFormatW

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 51KB - Virtual size: 70KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE