NEAS[.]a402cfd9528422dc51730a5c06a24560[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.a402cfd9528422dc51730a5c06a24560.exe
Size

66KB
MD5

a402cfd9528422dc51730a5c06a24560
SHA1

e2978db313341e2bdd9ea8a8dfc31e6416c3fd00
SHA256

850ddaef0b537de8d0f7281321caa171d6d04bc2f6bc73505f0ff71282c263ce
SHA512

8248aeeabc0568c7f581f5a2f3ffad419b11938a0a41f9dc4025ad2fcc6f82c3210bce471c108874f68fd840db25c532f7e190970878c3a0487af2e79184adb3
SSDEEP

1536:OXCPLgpKvD+1eHUX95GjySrihQZz9nh2jfUCKkgJxoExJ6Fj:OXCPzvD+o0XSj3qsnhKKkYxoEY

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.a402cfd9528422dc51730a5c06a24560.exe

Files

NEAS.a402cfd9528422dc51730a5c06a24560.exe
.exe windows:4 windows x86

bd087e6cffd777820d5e366fd8909251

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

OutputDebugStringW
EnumerateLocalComputerNamesA
EnumSystemLanguageGroupsW
GetLocaleInfoEx
FillConsoleOutputCharacterA
MapUserPhysicalPages
GetStagedPackagePathByFullName
QueryProtectedPolicy
WerRegisterRuntimeExceptionModuleWorker

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 51KB - Virtual size: 70KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE