NEAS[.]c4323771cf6dde13483606d53a26b230[.]exe | Triage

Sharing

General

Target

NEAS.c4323771cf6dde13483606d53a26b230.exe
Size

71KB
MD5

c4323771cf6dde13483606d53a26b230
SHA1

0eb6670612f2eec651f758996b99d6d31836f69c
SHA256

231f4d12dfd210248241aad11270af2fc7e090068dce7ee832509fa0aba1bb6d
SHA512

18933f858580572aae09dd100bc0c58d98fc673bdcc66351ec595e7a0ee398925d5ab5f558595bf0de4bcbfa4ee62c065a2e177cb6b4afa5a87cda8562e50ef2
SSDEEP

1536:KFAqeK+vcCLJTu0pQv8wFFnA2u7tRESlK+e41+l:KV+vcCV/OlFnZuJRVtB1M

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.c4323771cf6dde13483606d53a26b230.exe

Files

NEAS.c4323771cf6dde13483606d53a26b230.exe
.exe windows:4 windows x86

46d7826e4284be004424d7a7917b5b01

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetSystemWindowsDirectoryW
FreeEnvironmentStringsA
GetLocaleInfoW
LZOpenFileW
GetThreadContext
NumaVirtualQueryNode
GetProcessVersion
BaseQueryModuleData
EnumDateFormatsExW
QueryDosDeviceA

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 57KB - Virtual size: 94KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE