NEAS[.]9d1654d45cb6fe174098ecec44de4430[.]exe | Triage

Sharing

General

Target

NEAS.9d1654d45cb6fe174098ecec44de4430.exe
Size

66KB
MD5

9d1654d45cb6fe174098ecec44de4430
SHA1

10f673ef2a5a71db070f2ffeb74fa829c6506669
SHA256

d9a92fae5745b62eaf5f5a8ddec9f87c6c295f3515a103856029abcf494b492a
SHA512

435007a53b47d790e63decd88b7f8ee641a257dbad9cd61abc84ecc36b3b3b900a069432362ae3129b0c70a9909fa7785560542a702583d284541e59d47a532d
SSDEEP

1536:3ewiBKSkCZfzLSmlUZAKDrhT9oHGd3xgIlLAQiUtB4ag:hnCZfzLSmmXBZoizdL9tGag

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.9d1654d45cb6fe174098ecec44de4430.exe

Files

NEAS.9d1654d45cb6fe174098ecec44de4430.exe
.exe windows:4 windows x86

4f24acb90c4ec38bac6fef26c2cedc5e

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ReplaceFile
BasepReleaseAppXContext
GetComputerNameExA
RegLoadKeyW
BaseSetLastNTError
CheckElevationEnabled
GetThreadDescription
SetCurrentDirectoryW
TrySubmitThreadpoolCallback
GetModuleHandleExA

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 51KB - Virtual size: 70KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE