NEAS[.]2954352fda49b9b3534d70514c1cdc80[.]exe | Triage

Sharing

General

Target

NEAS.2954352fda49b9b3534d70514c1cdc80.exe
Size

66KB
MD5

2954352fda49b9b3534d70514c1cdc80
SHA1

be8a1be687c2a517b471183ae36b9315ccd1f51e
SHA256

95a11c5e549e68f2783e82764de68d907ab14ce46551ba5a9e1447a8061ea186
SHA512

a6c50c8e3e9493b0202d6ac73822d2606016ecf735632e83cd0dfb20b1b880fb953a5582383f38e543cb4470ad44dc5b5697ce1f94fe87bd48490324e29dab18
SSDEEP

1536:6vWo7oaTw0Sysjqezn96hMnB5cVEC19rv411uz527qTVUn:aw0Ejqe796hkks11uVTy

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.2954352fda49b9b3534d70514c1cdc80.exe

Files

NEAS.2954352fda49b9b3534d70514c1cdc80.exe
.exe windows:4 windows x86

4ddd94c4b068b76a87617392210f431a

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

TermsrvDeleteValue
BuildCommDCBAndTimeoutsW
GetACP
FormatApplicationUserModelId
AddVectoredExceptionHandler
FlushInstructionCache
CopyFileExA
EnumUILanguagesA
GetConsoleScreenBufferInfo
MapUserPhysicalPages

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 51KB - Virtual size: 70KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE