NEAS[.]4ae5ae9b5edbe88e87732b70af712b60[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.4ae5ae9b5edbe88e87732b70af712b60.exe
Size

119KB
MD5

4ae5ae9b5edbe88e87732b70af712b60
SHA1

45ab969d17d041283d6172acd3ac70985c31146d
SHA256

b4130f19f048b88b5d022ceb57200c6b1b08e9ad5d39b7621b097479dc93e27f
SHA512

734a3236cc06afa1bc3e9ee25780facbd32a95497efc9b6f0c72ff4ef3432b90116638ed677da34a742500f5b5521b401d135ff33a9988e16393322f1882c5a9
SSDEEP

3072:ONZdt3OEw0zWclb0jd1tpq0bmP6x9YYOl:WDXwEWHJgq9Y5

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.4ae5ae9b5edbe88e87732b70af712b60.exe

Files

NEAS.4ae5ae9b5edbe88e87732b70af712b60.exe
.exe windows:4 windows x86

10bf5e7b9887a67c600162d044b3da2c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProfileSectionW
EnumSystemCodePagesW
InvalidateConsoleDIBits
GetVolumeInformationA
GetVersionExW
SetFileShortNameW
UnregisterApplicationRestart
BuildCommDCBAndTimeoutsA
EnumSystemLocalesA
GetDiskFreeSpaceExW

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 105KB - Virtual size: 126KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE