NEAS[.]af37fe01bf4b1c784737237180339c40[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.af37fe01bf4b1c784737237180339c40.exe
Size

66KB
MD5

af37fe01bf4b1c784737237180339c40
SHA1

a8e2bc22d735dca0f6ac39f477ba5396a764ecdb
SHA256

afb0ce53c893435b99e24f126160922fff8b8894d4f1bb1fd5a45e02f019ac0f
SHA512

f84ab52ae68e416f6e7cf67a5e9afc7efe34c07fe706e91187c636eb59207a5c2d59a6859eeea802432700c3ad8e6df3f2e3280621e693cf27ade21b6fafbd56
SSDEEP

1536:vGqh7lYwnfYJQlwzpGjW3aq2DrhlhwiyvOTBBtP:vGqhRYwObYjWqq2D1bQGTb5

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.af37fe01bf4b1c784737237180339c40.exe

Files

NEAS.af37fe01bf4b1c784737237180339c40.exe
.exe windows:4 windows x86

3415b6e377db8ddfd40545633eb07446

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SetThreadAffinityMask
FormatApplicationUserModelId
_lcreat
TzSpecificLocalTimeToSystemTime
PostQueuedCompletionStatus
CompareStringA
LocalSize
CreateActCtxW
PackageFamilyNameFromId
WriteConsoleA

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 51KB - Virtual size: 70KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE