NEAS[.]d540752608229e38ac6ce4f44f785fe0[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.d540752608229e38ac6ce4f44f785fe0.exe
Size

119KB
MD5

d540752608229e38ac6ce4f44f785fe0
SHA1

45267cffd97c85822fc0ad9223ab62ac93884d21
SHA256

6005e71c36a52eb87455d40e28d436a39d59b248aa3e15063000a54442a33a0b
SHA512

f39baa270c29af2730f1b9a3acd26e599907aa479dcad681f7392ac4af96c7be4995703f44310bc37133272298c0b776a979db83b67342ba10351d157da64560
SSDEEP

3072:sQk19DUURpt4ZNZ9H/69QoVbDktI6LEumKb/VzFWZ:shpUaptOevtumMu

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.d540752608229e38ac6ce4f44f785fe0.exe

Files

NEAS.d540752608229e38ac6ce4f44f785fe0.exe
.exe windows:4 windows x86

9479f41688f2b687cabfc6969db7f9f4

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

RegSetValueExW
FindNextFileNameW
GetConsoleKeyboardLayoutNameA
IsProcessInJob
SetHandleInformation
OpenThread
EnumDateFormatsExEx
GetSystemTimes
WriteFileEx
GetTempPathA
EnumResourceTypesA

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 105KB - Virtual size: 126KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE