NEAS[.]62d41e3f8c0751978d87f4f8a01d2e30[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.62d41e3f8c0751978d87f4f8a01d2e30.exe
Size

66KB
MD5

62d41e3f8c0751978d87f4f8a01d2e30
SHA1

dd907718970d8071ffe89d4959200bbe3f9971d4
SHA256

f140f432357374156226fc7c975f9f45554f655c258dd50058a7e3b96b1c062b
SHA512

b333bbc153253b7984f2dc6a824a1ebf713d529c4743d8ebfdd6aa337400727210ed20b33b2312bd350cd22e6128efd3e08c43b88afb14eba36071f085e60153
SSDEEP

1536:29zgFYzHH4mMRsEcQDC0BM9nQvu/h2qqyhDvTkA0b4ONJewf:29MuHH4CQDTMiSh2qfhL4AeJewf

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.62d41e3f8c0751978d87f4f8a01d2e30.exe

Files

NEAS.62d41e3f8c0751978d87f4f8a01d2e30.exe
.exe windows:4 windows x86

26820711f9a9a1232f11fa22880719e7

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetGeoInfoA
GetQueuedCompletionStatus
FindNextVolumeMountPointW
GetStringTypeExA
SetConsoleTextAttribute
TzSpecificLocalTimeToSystemTime
BasepFreeAppCompatData
GetFirmwareEnvironmentVariableExA
WerpNotifyLoadStringResourceWorker

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 51KB - Virtual size: 70KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE