NEAS[.]794caf45c50b7c977f09fe93a0b1bee0[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.794caf45c50b7c977f09fe93a0b1bee0.exe
Size

66KB
MD5

794caf45c50b7c977f09fe93a0b1bee0
SHA1

32e88c06a32d3c039c2e84e065f27006f665dd36
SHA256

bfa2574d854621339f8c56ce60929832667cc903751c3432efefc05683171db0
SHA512

2f10cc5f860c78baa0ff1757e2cd5119a4132d1acb1ac400ff7fd4ee3695c2268563cbcbda93ee509661de81e9fa2c8eb57a8ee277972b271f804efaf9de3b6b
SSDEEP

1536:jaAzd9z/ECOaAjY2Y/BxDw7y8jwjsytaWX4ue6XodwjCCnEM:jam1/lTAkT32XQtaWovjdwb3

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.794caf45c50b7c977f09fe93a0b1bee0.exe

Files

NEAS.794caf45c50b7c977f09fe93a0b1bee0.exe
.exe windows:4 windows x86

95016deccf0c7bf6ac22d7a5e6ffd153

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SetSystemFileCacheSize
LocalUnlock
InitializeSListHead
HeapSize
AppPolicyGetLifecycleManagement
PostQueuedCompletionStatus
RegRestoreKeyW
LocalFlags
Sleep
GetBinaryTypeW
FindFirstFileExA

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 51KB - Virtual size: 70KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE