NEAS[.]0e4bf1d4b6e800270f7d23cfd7d0e410[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.0e4bf1d4b6e800270f7d23cfd7d0e410.exe
Size

119KB
MD5

0e4bf1d4b6e800270f7d23cfd7d0e410
SHA1

89efc0b6d87fd316a6e17a37efcd31c62b7b54f7
SHA256

bfcff36a398c770aca7b645eb06989d1ff462201766d58f5c1b3df739e3925fe
SHA512

028cbbee5718ceb61aaf42bd62171f50733fd71f9e3b755d917312730a9c7cc26f8298ca4810b65756dc73ffbefaf4b674e7792f4806fe2e0b177d6789b5faea
SSDEEP

3072:oPGcw2kSX7QQTPv4rvM8X7ebC3ddv61fGm8KNt23MQTe:oCSXBQ9ybC3S1fn8sBae

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.0e4bf1d4b6e800270f7d23cfd7d0e410.exe

Files

NEAS.0e4bf1d4b6e800270f7d23cfd7d0e410.exe
.exe windows:4 windows x86

42fa72b0c1e52362b317715a1470aa1f

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

PrivCopyFileExW
GetPackageId
RegLoadKeyA
GetCompressedFileSizeA
RegDeleteKeyExA
RegQueryValueExA
ConvertSystemTimeToCalDateTime
GetOEMCP
FatalExit
CreateNamedPipeW
LZRead
CopyFileW

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 105KB - Virtual size: 126KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE