NEAS[.]e603f4c4d7ef3573bd315005dc7d9630[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.e603f4c4d7ef3573bd315005dc7d9630.exe
Size

66KB
MD5

e603f4c4d7ef3573bd315005dc7d9630
SHA1

1d5c8c4574cdea76fd15e38922efb2c2d0477d59
SHA256

359622357f5844f7e50cca5f30e846b804b2aba8636028c200ebc69d64ac3214
SHA512

c76a2fc7e694b98d71408ae04a6afd858cb6aab032d4153b4c91dbdc614aeeedc030def81da4ad8a1d326d91cb72026086563703ee2d981c4847aa37ecbf48d9
SSDEEP

1536:8oaVwLZ0kT6u0lb2uFXO1rgxmfmG8NcfSglIsiOies/Ia6D9KqJklaIBy4ffY:RRZB9DlIZOi96pNTCg

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.e603f4c4d7ef3573bd315005dc7d9630.exe

Files

NEAS.e603f4c4d7ef3573bd315005dc7d9630.exe
.exe windows:4 windows x86

931ebbdf1ad1878748f13947f025509b

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetPrivateProfileSectionW
FileTimeToSystemTime
AppPolicyGetLifecycleManagement
RegDeleteKeyExW
QueryUnbiasedInterruptTime
GetProcessTimes
BasepFreeAppCompatData
QuirkIsEnabled2Worker
SetLastError

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 51KB - Virtual size: 70KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE