NEAS[.]ae40dc17b4824bedc5f6658749de0170[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.ae40dc17b4824bedc5f6658749de0170.exe
Size

66KB
MD5

ae40dc17b4824bedc5f6658749de0170
SHA1

440d54071562b489ada262dd9f7a6d74aa1eddf9
SHA256

6bb40296147ffdb857349a59c38e66f42593ce24d319b56f1ab78fb2f883732b
SHA512

b3eca366984e27b7ae9622d6348d276450f2dd703322d0bcb168cdf752dd61ca8b9ffa71807de5b59b64128562d58b7acf67f2c123c7f1bc2e9ceab8561807b6
SSDEEP

1536:0Bz8zctD3aP5w1mHV7IY68HR8g6RKSP/zD3zS7:0l8gtDMFIng4333zS7

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.ae40dc17b4824bedc5f6658749de0170.exe

Files

NEAS.ae40dc17b4824bedc5f6658749de0170.exe
.exe windows:4 windows x86

9132521c8572737ea6b7eb334203011d

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetCurrencyFormatA
GetShortPathNameW
GetApplicationRestartSettings
CloseState
FindVolumeMountPointClose
GetThreadUILanguage
FindFirstChangeNotificationA
SetFileBandwidthReservation
GetExitCodeProcess

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 51KB - Virtual size: 70KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE