NEAS[.]76220c9bf0d7bb09d6feef3dee3ebbe0[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.76220c9bf0d7bb09d6feef3dee3ebbe0.exe
Size

66KB
MD5

76220c9bf0d7bb09d6feef3dee3ebbe0
SHA1

b3b2f663eda6d3e396f303eeeafcc1cd44f46227
SHA256

e44d94786e7a291f061c78a5056404aa5fb7c0d6a1953b9b332611a3af987c2e
SHA512

0881079d6088decdf6527f696a29811105471fea7654e7c99a79f7d1a2d056d0bcd0f5554c3524e37159f6ae064ef0d248b0eb06bbe23843b43187704f0d484e
SSDEEP

768:7iIAqRacipNnvZeZCkdRkZiUhV3tfzkbvD8kfoY8Ekx+whD80t78nuHe4gug7d7j:r+jVbBGDtmw8QjFu/zAdBtdMzi4id0PI

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.76220c9bf0d7bb09d6feef3dee3ebbe0.exe

Files

NEAS.76220c9bf0d7bb09d6feef3dee3ebbe0.exe
.exe windows:4 windows x86

ff309f5560188dab2d603457d7213db4

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

OpenFileMappingW
K32GetModuleFileNameExA
LZOpenFileW
BaseDumpAppcompatCache
GetConsoleAliasExesLengthW
GetPackagesByPackageFamily
BaseIsAppcompatInfrastructureDisabledWorker
GetFirmwareType
SetConsoleActiveScreenBuffer

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 51KB - Virtual size: 70KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE