NEAS[.]4442c55bdff75cf25b9ff8b7c2ae70f0[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.4442c55bdff75cf25b9ff8b7c2ae70f0.exe
Size

66KB
MD5

4442c55bdff75cf25b9ff8b7c2ae70f0
SHA1

d25e3d2380dfc55f8494fe0aa04d2a43162f52be
SHA256

ac5a8b2b2be15663757b4535e59b4941dec36fd48fee1c041a79ec74280f8f56
SHA512

6f45435131a15e1c6efc61e374b7a40330e34c08a6abba730a4eccba1eed1ae2412c7a5947e2c304c81ef9a40bf98ee06fd5941b9636e691d218668521873a43
SSDEEP

1536:53dFh8fIk6p6zg2P5UhZGfCet3IpNZeXhCM/UhWA8FUVT:53dFqIkXgCEN8XYUUhR8F4

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.4442c55bdff75cf25b9ff8b7c2ae70f0.exe

Files

NEAS.4442c55bdff75cf25b9ff8b7c2ae70f0.exe
.exe windows:4 windows x86

6dcf35ed37a30bd17dfc81aae87ce628

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ParseApplicationUserModelId
TerminateJobObject
GetSystemTime
GetProductInfo
RegisterWaitUntilOOBECompleted
NlsGetCacheUpdateCount
EnumTimeFormatsW
GetThreadErrorMode
LocalFlags
GetCurrencyFormatA

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 51KB - Virtual size: 70KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE