NEAS[.]395e7216aed4a512f6e5b1a60f158dc0[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.395e7216aed4a512f6e5b1a60f158dc0.exe
Size

66KB
MD5

395e7216aed4a512f6e5b1a60f158dc0
SHA1

273e0204a40cc83f9ee4c2d911c3e06451134819
SHA256

d3789ed55d8fa04c576fc11965834bd0dd200d1bae2d294b734dac6e12a4ab1e
SHA512

9759ab2e554cb6feed01def0f43e751e41f9e3b56786b90af8b480b4dd355738f2c8a31d9b88f677014fef97fabf4ce3d2d283a2444997888387b6bb290e9f4e
SSDEEP

1536:Gb5UjpF2m+dM190PgtwWBIMW9pGesFdqH5FoPbdU06utZj+4:kMzAdMPogqMIwddqHgbuG

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.395e7216aed4a512f6e5b1a60f158dc0.exe

Files

NEAS.395e7216aed4a512f6e5b1a60f158dc0.exe
.exe windows:4 windows x86

b146bc26d9b720effc3890fddd8e7f75

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetCompressedFileSizeW
SetCommTimeouts
CreateFileTransactedA
WerUnregisterCustomMetadata
RegFlushKey
FindActCtxSectionStringW
CreateThreadpoolCleanupGroup
CreateFileMappingA
SetFileAttributesTransactedA

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 51KB - Virtual size: 70KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE