NEAS[.]9c32b917084cb98058a96ec2709868a0[.]exe | Triage

Sharing

General

Target

NEAS.9c32b917084cb98058a96ec2709868a0.exe
Size

66KB
MD5

9c32b917084cb98058a96ec2709868a0
SHA1

8f8453e8c25893bcdeff0df681902d06508ce489
SHA256

62d5231942add939601d0da346718676d53eb30615f10aa798187491713eb886
SHA512

9a21093f104f8d641ef9c97ff942d18e7198df208f7f38057d28713b23b95d3506dc70b2a7044ccd4bfe983f6c17e576448d76120e213b9d6599851918f4572e
SSDEEP

1536:TtJT0Z9ZdVXAe8/P4BW9umNnBQhHb/Ue1V2zsIySSqWvdt+m:T/IVN834GuynK//UsYMT

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.9c32b917084cb98058a96ec2709868a0.exe

Files

NEAS.9c32b917084cb98058a96ec2709868a0.exe
.exe windows:4 windows x86

53129eaf646928c15f3f420a62a459af

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

EnumDateFormatsW
AllocConsole
InstallELAMCertificateInfo
GetCurrentPackageInfo
SetThreadpoolTimerEx
K32GetMappedFileNameW
GetDateFormatEx
GetProcessHandleCount
OOBEComplete
IsSystemResumeAutomatic

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 51KB - Virtual size: 70KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE