NEAS[.]42bb2cd8b81cfa161d9c512d4adcee20[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.42bb2cd8b81cfa161d9c512d4adcee20.exe
Size

119KB
MD5

42bb2cd8b81cfa161d9c512d4adcee20
SHA1

744775905632fa07a81655c3d8e901f10f31c78b
SHA256

8f291870d19f30c3813994afba71179875ba112693374a5feb631f538e585bba
SHA512

b3f3fb3b5a8e7fa1bd583b9cbe0f1e352e1a5d6b74cd6225a69db488752dc088e77684f265365ee3a7e2764a8d2ccb3ae96df2473a1b493480ba02e2c1549434
SSDEEP

3072:Y/77lZDlqIbauPj3Bujl6wmp0EKTe1Hv1jL4:G4INPjIp6wc0EKT+do

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.42bb2cd8b81cfa161d9c512d4adcee20.exe

Files

NEAS.42bb2cd8b81cfa161d9c512d4adcee20.exe
.exe windows:4 windows x86

4f91e7ad9f4fdc758a294fbcf437ab67

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

BasepReleaseSxsCreateProcessUtilityStruct
lstrlenW
LoadStringBaseExW
CheckForReadOnlyResource
GetSystemWow64DirectoryA
WaitForMultipleObjectsEx
CreateDirectoryExW
EnumCalendarInfoW
MoveFileWithProgressA

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 105KB - Virtual size: 126KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE