NEAS[.]423f642184c3d79d8684ee295ad93180[.]exe | Triage

Sharing

General

Target

NEAS.423f642184c3d79d8684ee295ad93180.exe
Size

66KB
MD5

423f642184c3d79d8684ee295ad93180
SHA1

4dc6d90e7cc94974eec5cc6d6db6c83ef7f93233
SHA256

78b26850c03afe73f7b2a30b088af498c7323b8d4abdc47bef76dd6737df8008
SHA512

e889f3c072e8197b0b0f61484bf885c81254264864c53817465427e3cae2b9dbff557e2e747401e5b4b7c00d68455339ba45c6e943009844b8ea5d90b607d038
SSDEEP

1536:sV9V4rmtg7NZj5cnewTnRhNQR8YRvgjd9qvFe8sCBCcIAs/1D:s7GmImjRIdvgZ9ubBCnAsh

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.423f642184c3d79d8684ee295ad93180.exe

Files

NEAS.423f642184c3d79d8684ee295ad93180.exe
.exe windows:4 windows x86

7d2ba2be0636eb42793db9ccdb3d4024

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

PssDuplicateSnapshot
WaitForSingleObject
RemoveDllDirectory
GetCPInfo
SetProtectedPolicy
GetSystemTimeAsFileTime
K32GetPerformanceInfo
UnmapViewOfFile
LZOpenFileW
GetLocalTime
PssWalkMarkerTell

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 51KB - Virtual size: 70KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE