NEAS[.]4c760bc4b97ca45887a81b68610cb540[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.4c760bc4b97ca45887a81b68610cb540.exe
Size

83KB
MD5

4c760bc4b97ca45887a81b68610cb540
SHA1

8a7631f71a22b460a4ad248d618e0d35d4d99621
SHA256

f53bd44bd0b58766741f93e7cb0583a60717894d6aefae9c7dbc0412b0ffe8cb
SHA512

60afb2d9a85bf0f3feda04b13dbab1c946f60fbac074d3ea323b1ac95c56bf3eed133f49bff3d792d0059032e304545686bb0637e8429a7e7cb1ff81101cc9d4
SSDEEP

1536:WvGLAAbppIRfcYDqpbvtkv84Py8NXsU/edhZKz/U865w:WvGEPJcYahr83X5ekTQ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.4c760bc4b97ca45887a81b68610cb540.exe

Files

NEAS.4c760bc4b97ca45887a81b68610cb540.exe
.exe windows:4 windows x86

11982fd8be9254c4a36d1918ca5089d0

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

VirtualAlloc
HeapCreateTagsW
GetPrivateProfileSectionW
SetFilePointerEx
RaiseException
GetConsoleAliasesLengthA
IsDebuggerPresent
MoveFileW
GetPrivateProfileSectionNamesW
GetVolumePathNameW

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.brdata
Size: 27KB - Virtual size: 48KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE