NEAS[.]93997cdd709e87d47ba526d564d1b7b0[.]exe | Triage

Sharing

General

Target

NEAS.93997cdd709e87d47ba526d564d1b7b0.exe
Size

66KB
MD5

93997cdd709e87d47ba526d564d1b7b0
SHA1

e4be49330d9f8314475cd928e86d5b9b3f91fdb8
SHA256

77686f007bd28fb2acc4f037427934bb605bad7e2ad31e8b4f77980ebe99ad81
SHA512

8c5e6ab8b9c3575bb7d16d081fd87d79a84598d7659fe47c274b968de79439ac16c4f7223cc7d50aeb907928725fff3289a9e91ed55d2b29c9e25a2ac388af43
SSDEEP

1536:HLINO/hw9L08Ck0WSfd1/Vjci90BFQq3e60hI5BcgCFC1eX4W/G9ItTYr8G:rIqq/Ck0W09wi99q3ah+cgC81eX4WgI+

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.93997cdd709e87d47ba526d564d1b7b0.exe

Files

NEAS.93997cdd709e87d47ba526d564d1b7b0.exe
.exe windows:4 windows x86

b44cb93dfccf94fb747f99c6ba12babf

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

AddDllDirectory
BaseDumpAppcompatCacheWorker
GetCurrentApplicationUserModelId
CheckElevationEnabled
QueryPerformanceFrequency
CreateWaitableTimerW
CreateWaitableTimerExA
IsCalendarLeapMonth
ExpungeConsoleCommandHistoryA

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 51KB - Virtual size: 70KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE