NEAS[.]274b1d1a88dc9ebaa62126b56d0c8bc0[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.274b1d1a88dc9ebaa62126b56d0c8bc0.exe
Size

66KB
MD5

274b1d1a88dc9ebaa62126b56d0c8bc0
SHA1

a66fe9dce2755b0c4cf678c874832aa4e2a920bc
SHA256

8b95d443c626ec231c8e1afc9e26a1881518fd98938d1e2b2e6320362e77e28a
SHA512

f811231e70cd2d34465386b764be6859f3c1b9ffc700ccc25aa5b5d0dddd5c9a8b46e3710d8c3b72ea91b219976e385a0e8fb1a408c89cc2a48afbd77cfae123
SSDEEP

1536:Pf6MXECmDldiqSEGNKjLwnyqPyG+00cn+8Xz57QIWKki/djjissJC:PXAlvGNK3IPySpn+qVl1visl

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.274b1d1a88dc9ebaa62126b56d0c8bc0.exe

Files

NEAS.274b1d1a88dc9ebaa62126b56d0c8bc0.exe
.exe windows:4 windows x86

ce75a88a479177bce0536bd543a3f7a3

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

AppXGetOSMaxVersionTested
GetModuleHandleExW
BaseDumpAppcompatCacheWorker
SetThreadUILanguage
GetConsoleNlsMode
EnumUILanguagesW
GlobalAddAtomA
CloseThreadpoolWork
CreateProcessW
GetQueuedCompletionStatus

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 51KB - Virtual size: 70KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE