NEAS[.]912c275606599501238bbdf6e6788210[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.912c275606599501238bbdf6e6788210.exe
Size

66KB
MD5

912c275606599501238bbdf6e6788210
SHA1

77b8f328390f20cd6dddf91b933115362fbcc17e
SHA256

a530c31d006829b95a9b04bce19396466157d611df5b69b6103ebce88458a871
SHA512

e0780d6b8cf6a7fff1428b53296b048dfa122d520dc92cd38d9b5eb0372b70348dfca8fc9c72f783d593b4ac30effdc928d31f02cb26e246d1030d3c45c18c6f
SSDEEP

1536:oGm3ApuHyhRDnQ8xh1KiDs6x++dM5yFuBYLZ5j0G8sH/VDPS:Bm3hoDQ8xhw6EiH0mZN4sfV7S

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.912c275606599501238bbdf6e6788210.exe

Files

NEAS.912c275606599501238bbdf6e6788210.exe
.exe windows:4 windows x86

b463d36e7a4a2e7247d1f2e1b3889952

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetTempPathW
GetProcessAffinityMask
EnumTimeFormatsW
TerminateThread
UTRegister
GetConsoleAliasExesW
ActivateActCtxWorker
EnumSystemLocalesEx
LZInit
SetDllDirectoryA
EnumSystemCodePagesW

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 51KB - Virtual size: 70KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE