NEAS[.]8e398deb25d58a63cea1748201b6f9d0[.]exe | Triage

Sharing

General

Target

NEAS.8e398deb25d58a63cea1748201b6f9d0.exe
Size

66KB
MD5

8e398deb25d58a63cea1748201b6f9d0
SHA1

e8d10e824cd889cc58605c9370f20f7fc06c7915
SHA256

ca99eeb7dd8080971f7bec05b2eda9384a21d92ab4d51a0caf5fdc93490a93fe
SHA512

2cb345a982ba56fa9767c82342f692abde446cb50397aa32ee6c88718c4a638f6b10a45faa6f97a5777136d19f4896a8ec9439f06f047acf2af9af3e86c2be45
SSDEEP

1536:lAKsj/Nmk7VYn1qjWCxGEF/zhrzBwlBFdDBU94vT+R:l+jt7VYnD8Gst1wldYqTm

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.8e398deb25d58a63cea1748201b6f9d0.exe

Files

NEAS.8e398deb25d58a63cea1748201b6f9d0.exe
.exe windows:4 windows x86

1261d1ece095f479d4bea12ce5322ea5

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetPackagesByPackageFamily
BaseCheckAppcompatCacheEx
lstrcpynA
QueryDepthSList
GetPrivateProfileStructA
GetPhysicallyInstalledSystemMemory
WerSetFlags
BaseUpdateAppcompatCache
SetSystemFileCacheSize

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 51KB - Virtual size: 70KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE