NEAS[.]48794a87a168a938a8531665c6da7710[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.48794a87a168a938a8531665c6da7710.exe
Size

66KB
MD5

48794a87a168a938a8531665c6da7710
SHA1

531d3d58ea858908eecc18e53d89ac62887871eb
SHA256

648c5ebb675ffe1ef57865d2ac7ecc8d71379f156408c79ed1cd77fd141fda6c
SHA512

d5190636069fb53c0bb342697c73ceac82e9455c2e59ece2ef9e989b6a6f7fa3b09e5981af6907a43c7932c3fc1edfabeb0760e7b8676891b66fc6f38f7d8a27
SSDEEP

1536:6/fSV9XWhhJGvAM07+jN6hp3xk5F8UfhoC7W6pxnD6tubpt:uqVB0JGoM0CjN4fsRfhj7HnDj

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.48794a87a168a938a8531665c6da7710.exe

Files

NEAS.48794a87a168a938a8531665c6da7710.exe
.exe windows:4 windows x86

35c589aec564693669e4b09993d63695

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetSystemTimePreciseAsFileTime
WerUnregisterRuntimeExceptionModuleWorker
ReleaseSemaphore
PssWalkMarkerFree
FindResourceW
AcquireSRWLockShared
CreateMutexExA
Wow64GetThreadContext
SwitchToThread
FileTimeToLocalFileTime

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 51KB - Virtual size: 70KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE