NEAS[.]ad487758b057a924721706133a5f76e0[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.ad487758b057a924721706133a5f76e0.exe
Size

119KB
MD5

ad487758b057a924721706133a5f76e0
SHA1

64f858ebfd06e8a99da39833aadce3508aa8a863
SHA256

d2116af523bd4bef1e336eedb84ae2a99c0a4626d211277721a02808fc5fcb4f
SHA512

0768a0bfe01dbdbb5cb06da5993594e6a82b08df6dabc652cee31162743005c6f202b5f25ff5823cb36e96456d719a5a6e20be819878512666657e8845c5bcaf
SSDEEP

3072:Siimb2CMf9NPwQ8MrGogMkhw31EWXECvs8hH+0oSssX1MNXf:paf3fbrGnw31EcD9N+0ocef

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.ad487758b057a924721706133a5f76e0.exe

Files

NEAS.ad487758b057a924721706133a5f76e0.exe
.exe windows:4 windows x86

bb94b3736d34871d44a3e16367ea1d7f

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SetProtectedPolicy
GetDriveTypeW
HeapCompact
GetConsoleKeyboardLayoutNameW
EnumCalendarInfoExW
LZSeek
K32QueryWorkingSetEx
GetUserDefaultLangID
FindStringOrdinal
GetLongPathNameTransactedW

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 105KB - Virtual size: 126KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE