NEAS[.]f4b5ae5324b1abc91aa946ad5e236680[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.f4b5ae5324b1abc91aa946ad5e236680.exe
Size

66KB
MD5

f4b5ae5324b1abc91aa946ad5e236680
SHA1

8f5d2f8c68385156e2b0bbedb163040ee57e8997
SHA256

3c5901ef355a3f3f7258bd2a84214e3fbde933990b9424289a6778330186a247
SHA512

382a2817a47dae241bd99d3dd4b6785b46f5665c7ecc338967fa4f4a3faf18f6a4db110278c9549ca9bd61e10f5cb48422f5465eb6d18607370210d2f590b428
SSDEEP

1536:fqphsmchx6RuuT7HlWcgc4tBz3yUve+njpNTuATUDD3DHhfUeyj:fqDUhJuTbEfcWBz3yUve+jphQvDHEj

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.f4b5ae5324b1abc91aa946ad5e236680.exe

Files

NEAS.f4b5ae5324b1abc91aa946ad5e236680.exe
.exe windows:4 windows x86

003691c06121d3663e68d8c950d9bb2e

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

BasepAnsiStringToDynamicUnicodeString
LZClose
FlsAlloc
EnumCalendarInfoW
lstrlenW
_lread
SetFileTime
CheckTokenCapability
RegEnumKeyExA
GetSystemFileCacheSize
TermsrvDeleteKey
CheckForReadOnlyResourceFilter

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 51KB - Virtual size: 70KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE