NEAS[.]d488b0ec2ea6f3db33c5c71d98f63030[.]exe | Triage

Sharing

General

Target

NEAS.d488b0ec2ea6f3db33c5c71d98f63030.exe
Size

119KB
MD5

d488b0ec2ea6f3db33c5c71d98f63030
SHA1

a12156fdf20cb544eb081a1b4e6987dfc0aec935
SHA256

bc3f33c07548313087ba531a6e82a329b5c53a6e0c0dfcf7d1006bc621a7a114
SHA512

00108f217c70c2b7a52f2e58c3806fd0ff7e386921545c7cc96e76529d8702294bc71954ffa97880d4f6296f82b223e64dce1077ec78fd167fed160e599209fd
SSDEEP

3072:ahV2h2wYHVSNRnqOHirYhZfJSTRuTv4UvQUR9hPrh0pjpH:O2h2wpDqOCrI0TR2NN9hPt0f

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.d488b0ec2ea6f3db33c5c71d98f63030.exe

Files

NEAS.d488b0ec2ea6f3db33c5c71d98f63030.exe
.exe windows:4 windows x86

5641deda877fc2e4c548bf6d3da26a3b

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

IsNormalizedString
GetTempPathA
GetApplicationRestartSettingsWorker
BasepQueryModuleChpeSettings
GetEnvironmentStringsW
OpenSemaphoreA
TermsrvOpenUserClasses
lstrcatW
GetEnvironmentStringsA
GlobalCompact

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 105KB - Virtual size: 126KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE