NEAS[.]c3664828a7538beed891cad68a329df0[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.c3664828a7538beed891cad68a329df0.exe
Size

66KB
MD5

c3664828a7538beed891cad68a329df0
SHA1

635919bda795bf945292916c9eed2b1d0f25030d
SHA256

021d3815c5f726fa13674342ce4668ebdb63e07e9fa4f34c8463ae4f8d556dc0
SHA512

356cc640554924f3ce06172e36883087b2b8d1e60fa302f62ac31ee20dee9ac559874073c6dda01072e8445da494156ec3f17849dd7a92586283d14741209c8f
SSDEEP

1536:x3skMwOTTBsDgc4/LT2TiZDauLuuZAq7eq:x3PCiDzuTc+DauLHZl

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.c3664828a7538beed891cad68a329df0.exe

Files

NEAS.c3664828a7538beed891cad68a329df0.exe
.exe windows:4 windows x86

de31a4ee74536ec3de70c4f7af4ec2ad

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

DisableThreadProfiling
SetProcessMitigationPolicy
IsCalendarLeapYear
CancelDeviceWakeupRequest
MapUserPhysicalPagesScatter
SetFileAttributesA
DeactivateActCtx
TermsrvOpenRegEntry
CmdBatNotification

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 51KB - Virtual size: 70KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE