NEAS[.]4c6a749789a8812561ee6d5ad511e430[.]exe | Triage

Sharing

General

Target

NEAS.4c6a749789a8812561ee6d5ad511e430.exe
Size

964KB
MD5

4c6a749789a8812561ee6d5ad511e430
SHA1

d74784915583eabbc6c1118979da92f17b73e6a9
SHA256

fcafdb31ef7cc7b76a86db6e0f49971058339baf41904e6f3cfa14f47f5da1cd
SHA512

8e8a10f880307917436771166e450f6d8ffd3aba284bc0c0ed509c882b45957715640ef5d043d46a29f51ef476a6ccfc9ea31765284338e3de03bef75ed0a6ea
SSDEEP

24576:3LWwz5awaq/+OrLC7np+ysI/bivSFDt8MfNGHEml6kb:3L95atOJrLC7p+ybiq1t8MfNG5db

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.4c6a749789a8812561ee6d5ad511e430.exe

Files

NEAS.4c6a749789a8812561ee6d5ad511e430.exe
.exe windows:4 windows x86

3a8897c84eb41f36b4bbabcc617408b8

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress

msvcrt

strncpy

iphlpapi

GetInterfaceInfo

psapi

GetMappedFileNameW

user32

GetWindow

advapi32

RegDeleteKeyA

shell32

SHGetFolderPathW

Sections

.text
Size: 128KB - Virtual size: 408KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.sedata
Size: 796KB - Virtual size: 796KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 28KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.sedata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ