NEAS[.]311616b487daf487574011888fba0b70[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.311616b487daf487574011888fba0b70.exe
Size

66KB
MD5

311616b487daf487574011888fba0b70
SHA1

633c406adefe3ef3ef8ff4077af69bcdc61398bb
SHA256

0852644efa1ad97990dda0ec42cd97b41461ae4e04d72b4d52aa49cc8dcbcdc3
SHA512

1beef409f2ba67f26fd5b66202bc5a11d7e22f33801a1a8794c3b7b0e02ca082f5ae3fce5e651f4a4df47bfeb418a6942e6cff9a418f33c98bf699ad9439de0e
SSDEEP

1536:2a5fVo+Ya2/XIXif7dqazUs9azv0Yu6YuUp2:2CfVJ2/XIMqags9qvbYFU

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.311616b487daf487574011888fba0b70.exe

Files

NEAS.311616b487daf487574011888fba0b70.exe
.exe windows:4 windows x86

475e298178b54dd1a0c83af7da056b46

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

BaseElevationPostProcessing
CopyFileTransactedW
GetTimeZoneInformationForYear
GetApplicationRecoveryCallbackWorker
SetCommTimeouts
GetVersion
Thread32First
GetUILanguageInfo
EnumResourceTypesExW
SetThreadpoolTimerEx

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 51KB - Virtual size: 70KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE