NEAS[.]48bf841eed7e2302e038560c877ce510[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.48bf841eed7e2302e038560c877ce510.exe
Size

135KB
MD5

48bf841eed7e2302e038560c877ce510
SHA1

03e48e0bb8fce706f9fc854e203cd64cabaf7497
SHA256

2a99db862dbd0199fd22cfcdd6bf35145299fa507ee2e3eba4789220c347a1a7
SHA512

0bc3a988eee208215bcb96b01d20f07bc403db4c8c8db7b3137545edf18631531fd9233299a348c3c39b7ff619ee9efdab080f75f98b3ce56d59c7ffb62ba3ed
SSDEEP

3072:5Y2nKtqli1HTJgeqAstWSQMQcN0acS1eLtx87rLvq/ar:5R6zJgens4SQMQckLQvq/W

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.48bf841eed7e2302e038560c877ce510.exe

Files

NEAS.48bf841eed7e2302e038560c877ce510.exe
.exe windows:4 windows x86

ada2004eb84bdbdaca18a0bc921d9be6

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

IsBadStringPtrA
EnumResourceTypesW
ReadFileScatter
GetDiskFreeSpaceExA
SetTimeZoneInformation
_lwrite
WritePrivateProfileStringW
_hwrite
GetThreadPriority
GetModuleHandleA
EnumResourceLanguagesW
GetSystemTime
WriteProfileSectionW
ChangeTimerQueueTimer
UnhandledExceptionFilter
CancelWaitableTimer
SetHandleCount
GetProcessTimes
GetVolumePathNameW
DnsHostnameToComputerNameW
GetDiskFreeSpaceA
CreateEventA
InterlockedIncrement
EscapeCommFunction
CreateMailslotA
DefineDosDeviceA

user32

GetMenuContextHelpId
PostMessageA
GetSystemMetrics

Sections

.text
Size: 85KB - Virtual size: 85KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 937B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.pdata
Size: 512B - Virtual size: 282B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 980B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 46KB - Virtual size: 46KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE