NEAS[.]5712b4a9fc1d77c59e6725318a4bfbb0[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.5712b4a9fc1d77c59e6725318a4bfbb0.exe
Size

66KB
MD5

5712b4a9fc1d77c59e6725318a4bfbb0
SHA1

7a457c9040c45077977caddcb61e9f4158596d15
SHA256

fd89aa94d675b5aa0f01933f6972d8dc3da3c486a965baeffb3d221be7d8c81e
SHA512

f8e329a19243ec3ad0fb0f504d0996e20c4355f2e7fbedfa9125fcc7f80773405e2c2ac1299fdc701db44bf6b52a242253a76897ce057884e7d67eef2eab796c
SSDEEP

768:i0vUvWXW03Hqc/Isxup6X4a0ND7EH0Cz1OeKxQaw70RkO/v/jNgtQntpups3SPmt:i5ecxK5KCHO/3jNgGntp73SPsnavUZP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.5712b4a9fc1d77c59e6725318a4bfbb0.exe

Files

NEAS.5712b4a9fc1d77c59e6725318a4bfbb0.exe
.exe windows:4 windows x86

460fd005fca1fd045fd4b5b939c6d205

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetUserPreferredUILanguages
SetFileValidData
CreateDirectoryTransactedW
BasepCheckWebBladeHashes
BaseUpdateVDMEntry
FlsFree
GetCPInfoExA
GetNumaProcessorNodeEx
FindVolumeMountPointClose
GetWindowsDirectoryA

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 51KB - Virtual size: 70KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE