NEAS[.]609816a8eb52088944d88b7cbe5725e0[.]exe | Triage

Sharing

General

Target

NEAS.609816a8eb52088944d88b7cbe5725e0.exe
Size

66KB
MD5

609816a8eb52088944d88b7cbe5725e0
SHA1

a3737a9f0ce63daa191ffdcf29f53afb58c843ad
SHA256

76e7fe0838b36f625273650035d0e5d6c77f5a18a8207fdbb01b4fda4751a17f
SHA512

efdc12096484719996d8b2dad4bef0cccf73511f8966a6be7860007aa218a56a6eb601b89af45b07a1735e8cf0e45a9f771e2435545fdb3776d45b8c7fa9d747
SSDEEP

1536:Un7d6X+aJKVzHzfqggvhdWJB/mkcsiKlGFq85cp2C+1OX8nh/+:BQHzfqgshdU/mkc5FFqxLKg

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.609816a8eb52088944d88b7cbe5725e0.exe

Files

NEAS.609816a8eb52088944d88b7cbe5725e0.exe
.exe windows:4 windows x86

5c287522f3378c055c4b70001009852c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

WerRegisterCustomMetadata
NeedCurrentDirectoryForExePathA
GetOEMCP
EnumLanguageGroupLocalesW
RegSetValueExA
ConvertFiberToThread
ReleaseSemaphoreWhenCallbackReturns
GetCurrentPackageId
RegSetValueExA

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 51KB - Virtual size: 70KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE