NEAS[.]46b1e1d464f777deb0e1d75c2ded5760[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.46b1e1d464f777deb0e1d75c2ded5760.exe
Size

511KB
MD5

46b1e1d464f777deb0e1d75c2ded5760
SHA1

23525a1d6459ee14cc369ad048202136c4329f8f
SHA256

6240fcf9a6b5253135727227f1a370b7ff358558d6e8016eb817ee0e0936bbcb
SHA512

ad64e3c28411a8b402b683f1826a5befcd99f7976bbff1345c27716de6deac0473364b2194e488791167376e90253dbbe6f74d711553de2057d0de620bd6de77
SSDEEP

6144:bgntBp/jstHnfuX3UXGkG2ODSTzTw3VSF9vlyF5vU2n2BVuAeEmm2duc2uVTL7:bk4mXNZ7DqXcwvdg1d2Kxd7oV6X7

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.46b1e1d464f777deb0e1d75c2ded5760.exe

Files

NEAS.46b1e1d464f777deb0e1d75c2ded5760.exe
.exe windows:4 windows x86

9ff9e4ea8157a875fdd2de5af7f39743

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryA
GetFileTime
CreateDirectoryExA
OpenThread
FindFirstFileExA
GetCPInfoExA
lstrcmpi
IsBadCodePtr
WaitNamedPipeA
ActivateActCtx
GetNamedPipeHandleStateA
HeapFree
EnumResourceLanguagesA

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 477KB - Virtual size: 478KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE