NEAS[.]99a0f9daa1d84d791d443c3d7a0cae30[.]exe | Triage

Sharing

General

Target

NEAS.99a0f9daa1d84d791d443c3d7a0cae30.exe
Size

66KB
MD5

99a0f9daa1d84d791d443c3d7a0cae30
SHA1

f7166b813b0b1614e12152e68f346df3027e07b7
SHA256

4a8614b687c43db9991bc682e1c91bcd44e8beba2ddff0573b4771c228317b64
SHA512

9e0346fa37c6cf770a8f9960af1810d92274479c94bb3e844ab6db084ca1a5ae00bab19c1ace95a0e3ba6c805057a9e099aea8ca55ac65b17e141fc464dc6b98
SSDEEP

1536:BGtKiOrVbSgbmOY3Jk0Yo6JDO5edso1I1maYxcZwK5oSjvGJ:5ZkJcJi5eG1Ipejg

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.99a0f9daa1d84d791d443c3d7a0cae30.exe

Files

NEAS.99a0f9daa1d84d791d443c3d7a0cae30.exe
.exe windows:4 windows x86

be6642e041dfe6e5e0a0cc97c5674d97

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetVolumePathNameA
GetApplicationRestartSettings
GetCurrentPackageFullName
ResetWriteWatch
SetFileShortNameA
BaseVerifyUnicodeString
SetLastError
EnumResourceTypesW
FindFirstFileTransactedW
SetSystemPowerState

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 51KB - Virtual size: 70KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE