NEAS[.]309b02a02dd57a546270e32fade97600[.]exe | Triage

Sharing

General

Target

NEAS.309b02a02dd57a546270e32fade97600.exe
Size

119KB
MD5

309b02a02dd57a546270e32fade97600
SHA1

303e0560d24eb9744ef535a9782d0da85751df8f
SHA256

799f2e75ef56d1d32776d477cf64c2461d24d4dd866f93fa88b1d1646fa968a5
SHA512

62c14f5515f4448231eebff6de4dcd93faa8670ff1af4e556b2bb96f5dedb46af916e2549b97f41eac61983c59fab81658bcb79cfe8ae82b715ca6ace0a1614f
SSDEEP

3072:qiAzbV4Gkam9TLBNAuwOC9LpkIvVOoXxmLi0H:96bVM9TLBNAuwOULpT9OohmeI

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.309b02a02dd57a546270e32fade97600.exe

Files

NEAS.309b02a02dd57a546270e32fade97600.exe
.exe windows:4 windows x86

f54723cc5e8ed81fdd0109a2dbce2e63

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

BaseCheckAppcompatCacheEx
QueryActCtxWWorker
WerRegisterMemoryBlockWorker
GetProcessPriorityBoost
SetConsoleTextAttribute
IsNativeVhdBoot
IsEnclaveTypeSupported
VerifyVersionInfoW
GetPackagePath
EnumSystemLanguageGroupsA

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 105KB - Virtual size: 126KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE