NEAS[.]45b89a21fade376f0a5ae15f52116390[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.45b89a21fade376f0a5ae15f52116390.exe
Size

119KB
MD5

45b89a21fade376f0a5ae15f52116390
SHA1

28c2e0e67026b6ab0f3317f51baaa40ec0b4434b
SHA256

446335aa52f06499e8b705518efd2dc64c4b2e261b645f845e7aeac5db81017b
SHA512

5dfa4c311fa811ffc1eba37345c75639ae5b19f72b77ff5323d197893a550c178d7756c9afafbbf75d76a8f5c54e0681858d1abca5188ff0cbc52944fb827a3b
SSDEEP

3072:oPd0luc7mWq4F3n/RodJLcd7x6pxIBgKzvW7oLH0xO:I0yWDF3nJodK7x0WOcvW0gxO

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.45b89a21fade376f0a5ae15f52116390.exe

Files

NEAS.45b89a21fade376f0a5ae15f52116390.exe
.exe windows:4 windows x86

080ae73ec8ce35f51a91bf639b02ef9f

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProfileStringW
InitOnceInitialize
DosDateTimeToFileTime
PowerClearRequest
RegDeleteTreeW
FindNextStreamW
GetCalendarSupportedDateRange
GetVersionExW
TerminateProcess
BaseUpdateAppcompatCacheWorker

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 105KB - Virtual size: 126KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE