NEAS[.]403f51962927719cc76b5e089fb91730[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.403f51962927719cc76b5e089fb91730.exe
Size

119KB
MD5

403f51962927719cc76b5e089fb91730
SHA1

d1eccc4244eff6cae314dba51447a9a9c50814fc
SHA256

68c6ab2a901ef512c130f9f69c2f9e82da2fabb87fc8fb8f929c8b164d1ed1f8
SHA512

f6abdf0e169f8ef84d66cc5558390c08dcb68ccf07bc1ca0929c20cdf13a15a948c32cece31db8449909ff263bb3afe57b449bfaec95d9caccd303d2763fd035
SSDEEP

3072:mLOpLrVrTYRQCc7+j4nVvM+rfEYDtQEOXaTqgdEpC2Gg:Sk+8nNFp/OXaugdEX

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.403f51962927719cc76b5e089fb91730.exe

Files

NEAS.403f51962927719cc76b5e089fb91730.exe
.exe windows:4 windows x86

a2cefb13287cfe02d8b0d2d4f9c2d03e

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

RegOpenKeyExA
CreateFileMappingNumaW
GetCompressedFileSizeTransactedA
LCMapStringEx
BindIoCompletionCallback
SetConsoleCursorPosition
GetExpandedNameA
GetSystemWindowsDirectoryW
GetStartupInfoA
SetWaitableTimer

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 105KB - Virtual size: 126KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE