NEAS[.]afe40b184825ab26e72dd240dff1d410[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.afe40b184825ab26e72dd240dff1d410.exe
Size

66KB
MD5

afe40b184825ab26e72dd240dff1d410
SHA1

f72308de707788a802283884af47bfc3bbc5548b
SHA256

9f935fcfa32b74b475c22b74f815803cda88481fad645391f47fc0e7a4c91356
SHA512

dc2e390df6e5155dae31198e618d97625f7af602e1714a4bf2bb70f2f83fc89bb06ca5f345b4b47d4af4ec7b40d72d83b572641e29bdfdaf2d5050192b836102
SSDEEP

1536:plJiJueiZyOrMi9TBfzPEIK0wDveZw6uyF2F2st78R8paGZS8T027jryo8Isgm:plo12LTBfzcILJ5F2pmaIUTBXrySsgm

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.afe40b184825ab26e72dd240dff1d410.exe

Files

NEAS.afe40b184825ab26e72dd240dff1d410.exe
.exe windows:4 windows x86

d65a17933f25ea0128423327765b74d5

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetAtomNameA
GetCalendarDateFormatEx
GetHandleContext
GetProcessPreferredUILanguages
FindFirstVolumeW
CheckForReadOnlyResourceFilter
SetTapeParameters
GetFileSizeEx
CreateFile2
BasepMapModuleHandle

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 51KB - Virtual size: 70KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE