NEAS[.]c81b24de3af2a0e8a32bef0a761d37b0[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.c81b24de3af2a0e8a32bef0a761d37b0.exe
Size

66KB
MD5

c81b24de3af2a0e8a32bef0a761d37b0
SHA1

9c50a7a77407f5454cac11c65db9d8a590c99a1e
SHA256

abf454b00b8eea0706969cd0a421cb384671f8159eb88e41269641df839103d9
SHA512

1461eeb596a993e63cdca88f6aface95ec36ca971033b93834326be6fb1bb763361d43e1c0c7e3171286f523f9ae57ebc30494474bcd46b8509dd8b41262ba6f
SSDEEP

1536:6HwwFDZTfsY43+fO6JjtfcWicB5hsQ90zqJKVJt6:SFRU+D5I85hsQ+zqJKU

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.c81b24de3af2a0e8a32bef0a761d37b0.exe

Files

NEAS.c81b24de3af2a0e8a32bef0a761d37b0.exe
.exe windows:4 windows x86

cb5d4983d17a34c80b9561a525049a54

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SetSystemTime
CreateMutexA
OpenPackageInfoByFullName
LZRead
InstallELAMCertificateInfo
GetPackageApplicationIds
K32GetDeviceDriverBaseNameA
RegNotifyChangeKeyValue
GetEnvironmentStringsA
VerifyVersionInfoA

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 51KB - Virtual size: 70KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE