NEAS[.]52becaadeec5e1adcdd9f9779a7ad090[.]exe | Triage

Sharing

General

Target

NEAS.52becaadeec5e1adcdd9f9779a7ad090.exe
Size

119KB
MD5

52becaadeec5e1adcdd9f9779a7ad090
SHA1

f538f44631e56233f4eb5518f10f70f68888dd9f
SHA256

fc688f09517dbe9ccdcd79d9e564d79c4aae7f670ea4fdda8c7bcd08a214f131
SHA512

b486d2c54398e253bf34dd47d64f6645884851b20c2e7d967d5aeee5d767068b7c409cfa0133dcc3ec2780b8c7216fa8e29b38dc2be14218d9801311295af236
SSDEEP

3072:BAbwHlwwi1txeOhefcKKIa4kgai/3B9ZGI8sVvgY8d8QN:B2wY3xp0WIauZ3B9ZGIvvahN

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.52becaadeec5e1adcdd9f9779a7ad090.exe

Files

NEAS.52becaadeec5e1adcdd9f9779a7ad090.exe
.exe windows:4 windows x86

caece6cb81677822b3414184b9d97f87

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

BasepInitAppCompatData
SetEvent
OfferVirtualMemory
lstrcmp
BaseGenerateAppCompatData
RemoveDirectoryA
PssFreeSnapshot
TermsrvSetKeySecurity
SetEnvironmentStringsA
timeGetDevCaps
IdnToUnicode

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 105KB - Virtual size: 126KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE