NEAS[.]41289a5bd4505c5d5284216b91457b90[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.41289a5bd4505c5d5284216b91457b90.exe
Size

66KB
MD5

41289a5bd4505c5d5284216b91457b90
SHA1

bf3af84d68a2091bba6a6ac53af243cd958d45ac
SHA256

14a9f6d60e41a615c501b6f8cc2d6ee5ff5952804d535c0c3643290ab139fc00
SHA512

90ab8cb97d0ea243a5e2458395893bd583c210b8aeef3603dde5c36bf162bc7e4cd3b83792bafb1295fa80d044eb067d8c5f21c317cc7e5318a265d274294956
SSDEEP

1536:aCucEFsOg04PQ4d3U9n/BUezLyGIDS4vglr8gWXfRNdpL:GRs704Pn3I/WezLLplQguJvpL

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.41289a5bd4505c5d5284216b91457b90.exe

Files

NEAS.41289a5bd4505c5d5284216b91457b90.exe
.exe windows:4 windows x86

aed7a7a2a0195e347210280c5ac6de47

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

K32GetMappedFileNameA
BasepIsProcessAllowed
NotifyMountMgr
RtlCaptureStackBackTrace
CreateWaitableTimerExA
SetProcessInformation
EnumSystemGeoNames
EnumDateFormatsW
SetThreadAffinityMask
GetFileType

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 51KB - Virtual size: 70KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE