NEAS[.]d1455fcdf2a92de95c662aa995f816f0[.]exe | Triage

Sharing

General

Target

NEAS.d1455fcdf2a92de95c662aa995f816f0.exe
Size

119KB
MD5

d1455fcdf2a92de95c662aa995f816f0
SHA1

287f5a4f1c5bf0aefe38541d37caf5e84d68cc0e
SHA256

07a48058bd643ba64f048b8070509b29148426b3cac752f2da17d7a29f9b6149
SHA512

b406106a08055a46a183d89fc3dbec02303746ef4d6a1c0884960634f3a64170721ea025c223cbcd0ccdf0850ff8c20acdc7a4502c06e32b2f37bd80bc3e206b
SSDEEP

1536:tQEFjzbNYnuNYgflQUVORRNEO3ntGioOLC8GY3oyZ+wAKVCroFj7Yw2FWbwFyTox:tQUKnKPDOXWKz+8GryZB0oYWCzSFiT

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.d1455fcdf2a92de95c662aa995f816f0.exe

Files

NEAS.d1455fcdf2a92de95c662aa995f816f0.exe
.exe windows:4 windows x86

df330d6309a91be9f209c275baadeef7

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SetLastConsoleEventActive
GlobalUnWire
Process32NextW
CloseHandle
TermsrvConvertSysRootToUserDir
GetNamedPipeHandleStateW
EnumTimeFormatsEx
BasepGetAppCompatData
RegisterWowExec
GetSystemTimeAsFileTime

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 105KB - Virtual size: 126KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE