NEAS[.]a9e3648f1cc722b51fede8a8479a0d50[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.a9e3648f1cc722b51fede8a8479a0d50.exe
Size

119KB
MD5

a9e3648f1cc722b51fede8a8479a0d50
SHA1

2d9dfc410f7d5a39b892da9524fe9b8b3093b6b0
SHA256

da1bb0d1658fa51377a5ba3daf6c31c6f8c420229570067b360338b3dc79bacc
SHA512

bc12c2242fa2a6d31416c63077d22cc65d1ec19437c6f75aca61c95fe836d6fa2ee82800ffda9e711a7698a0d263b601748a621cdce1e03f2416b1d432a4dfc5
SSDEEP

1536:g0t8Hsn/XCGV0TDHg+BoYxlV0kMLEAlcUtx8yL5zpLPyM7zwZEhfL0gpuI+ih7i8:/UizdkqSGXBzfo10qQrTnRD3Ck

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.a9e3648f1cc722b51fede8a8479a0d50.exe

Files

NEAS.a9e3648f1cc722b51fede8a8479a0d50.exe
.exe windows:4 windows x86

d902e90fd65d69574ff9027f71b10a9e

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

BasepAppXExtension
GetConsoleScreenBufferInfoEx
timeGetDevCaps
CompareCalendarDates
WerpNotifyUseStringResourceWorker
GetUserDefaultLCID
WakeAllConditionVariable
FindNLSStringEx
PssQuerySnapshot
GetNumberFormatW

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 105KB - Virtual size: 126KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE