NEAS[.]958540ecbf266e5d5222a94a1b5f40c0[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.958540ecbf266e5d5222a94a1b5f40c0.exe
Size

66KB
MD5

958540ecbf266e5d5222a94a1b5f40c0
SHA1

4e235aa6d35e4c2915f930ce799f18583882ce17
SHA256

2fb33842b26c573dbc196d4ca69f11aa351836b8a0e0ffd225dccf77e5781b1b
SHA512

4ee0b13536ea3f5da0905306ea78af92c9c1665366abcbd5fb34740afea6097ccd74e526acfb8e4385aaac4045c768acb5496a00f61704890d8ffa3045fa2bc9
SSDEEP

1536:r2vb0rm1ZVujBILbMGDKehC+6+6VMeD0+dcLRg/3Ep:ruS0ZV6BILbMmRhX6+LBg8RA3E

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.958540ecbf266e5d5222a94a1b5f40c0.exe

Files

NEAS.958540ecbf266e5d5222a94a1b5f40c0.exe
.exe windows:4 windows x86

3726abe59e2811d09ab807bf06800905

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetStringTypeW
CheckElevation
BackupSeek
PackageFullNameFromId
GetPackagesByPackageFamily
ReadConsoleInputW
timeGetSystemTime
UnregisterWaitEx
GetCurrentActCtx
lstrcat
CommConfigDialogW

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 51KB - Virtual size: 70KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE