NEAS[.]284e1846f0a16f90be0846cfe69163c0[.]exe | Triage

Sharing

General

Target

NEAS.284e1846f0a16f90be0846cfe69163c0.exe
Size

119KB
MD5

284e1846f0a16f90be0846cfe69163c0
SHA1

d650e2089f41cd7739db2509a2645ca50fa8a961
SHA256

f27e185f7dfdbbb43ef135afba800a4a599f02d07445daedc556b17da95c0126
SHA512

ac48b2181852da746f82cf2b63baa0c0317ff0a35cd13ab75f6ad97711c6362d83142d4526e0b9e2a7d8e54364ec356301b1aa02a310265ef904844d0f6a5f4c
SSDEEP

3072:gba4sjdA0VVF9hKVzWsz2MvenK2mYxe4WZok71A+DW1:HvJVVxKVz9aMvD2mYxnkC+I

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.284e1846f0a16f90be0846cfe69163c0.exe

Files

NEAS.284e1846f0a16f90be0846cfe69163c0.exe
.exe windows:4 windows x86

202969e69291172acb5a4193d514f66b

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

InitializeProcThreadAttributeList
RegSetKeySecurity
CallNamedPipeA
GetFileAttributesTransactedW
GetNamedPipeClientComputerNameA
LoadLibraryExA
GetVolumePathNamesForVolumeNameW
OpenFileMappingA
NlsUpdateSystemLocale

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 105KB - Virtual size: 126KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE