NEAS[.]774248e12ac42aa9dd12e974931148e0[.]exe | Triage

Sharing

General

Target

NEAS.774248e12ac42aa9dd12e974931148e0.exe
Size

119KB
MD5

774248e12ac42aa9dd12e974931148e0
SHA1

cf8c9a430e19292195ff5562649d3e50f3903a10
SHA256

d01221ef55749724b3d03b312d71866f1cb4bd2911bc1d40df7e2c8feffa661f
SHA512

c2f5b2c90085a53dfd75f85674a1963fd740cc2f3bbffc350e9d7d1b190339adde8d899f026e6f012996a57920094865de416ac2e9c94ad977f35b21c663f3b8
SSDEEP

3072:kJeazdGy8oU/64cug1oOnaeEoKTSpaiqdaLtANC3gz:ktQUU/6/jx1paosCQz

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.774248e12ac42aa9dd12e974931148e0.exe

Files

NEAS.774248e12ac42aa9dd12e974931148e0.exe
.exe windows:4 windows x86

063edf153b4f9c6a3cb111d7beb59b85

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

OutputDebugStringW
CreateMutexExW
CheckTokenMembershipEx
WriteProcessMemory
LoadLibraryExA
RegFlushKey
IsCalendarLeapYear
GetSystemWindowsDirectoryA
QueryPerformanceFrequency
GetCurrentDirectoryA

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 105KB - Virtual size: 126KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE