NEAS[.]946977845c3916f9b91d1ce421aa94c0[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.946977845c3916f9b91d1ce421aa94c0.exe
Size

66KB
MD5

946977845c3916f9b91d1ce421aa94c0
SHA1

0402e0d5676b51295a24a0720365a7c60f9d2ec3
SHA256

1693a6d6512ad86ac05e5708a7d281791a55bca5084bd4f52c2fc1cd28a815a2
SHA512

592cc5d8ee857a5a78077bbc52610f5f20799dbf9441a6f04e6ff5ec100554e004ef3e85ea5390a027a2b975ea67675908fbe7801d22ded7c002b47df4c01ec4
SSDEEP

1536:e+2Mzf3pu0aDJQsAgaW4JDQoG7pZFLEwfuug6eutPR2gCO7258:ehFKgaHJUoG7rFLDaSBHCC5

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.946977845c3916f9b91d1ce421aa94c0.exe

Files

NEAS.946977845c3916f9b91d1ce421aa94c0.exe
.exe windows:4 windows x86

bcf15c8bbb72da7319d56a473e2f59a5

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SetTimeZoneInformation
EnumResourceLanguagesExW
WriteTapemark
GetSystemTimePreciseAsFileTime
GetSystemTimeAsFileTime
DeleteVolumeMountPointW
GetCurrentDirectoryA
BaseIsAppcompatInfrastructureDisabled
HeapLock

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 51KB - Virtual size: 70KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE