NEAS[.]4cd061a195f3b6465da0846e0f103e50[.]exe | Triage

Sharing

General

Target

NEAS.4cd061a195f3b6465da0846e0f103e50.exe
Size

119KB
MD5

4cd061a195f3b6465da0846e0f103e50
SHA1

2c34f055b313076ea3c283e0cc7254cfbda24012
SHA256

9a3a58052c9498b5b91da8160b7f0264a63853202ff8aa9e7ac6195c70680e58
SHA512

d4e38d4042ede5efcce1a63b517b982573b23d5d2cc2fc0e3e47f020b233cf5d4f4c9f5e34f5ab9309f68baf25eb222e6ae8fba777f5450b93b524adcb08f865
SSDEEP

3072:YanW0XYUyRwbmPSt+Dk+UlWtcIVEYGU3d:jLXYUyR5PIfWtcHoN

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.4cd061a195f3b6465da0846e0f103e50.exe

Files

NEAS.4cd061a195f3b6465da0846e0f103e50.exe
.exe windows:4 windows x86

8b5cf2ace98c82f55d25f6c568bac1b5

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SystemTimeToTzSpecificLocalTime
PurgeComm
BaseDumpAppcompatCache
FillConsoleOutputAttribute
IsNormalizedString
BasepAppContainerEnvironmentExtension
CreateThreadpoolCleanupGroup
CommConfigDialogA
Wow64Transition

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 105KB - Virtual size: 126KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE