NEAS[.]df3e62f76eb5ef3711c50b788a0bd1c0[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.df3e62f76eb5ef3711c50b788a0bd1c0.exe
Size

119KB
MD5

df3e62f76eb5ef3711c50b788a0bd1c0
SHA1

f76a5a8b1ca42f7107aeb90d04b2ad124c3c57cf
SHA256

dfb861be1289f483ea71ea573c7f6f7977ca74a69e8e138ba4894644fea5e04a
SHA512

3b1b62f6c5dcea4be7c9c90d0aebaf0efbd22d3f20686227d13aa699b1b7d5faf93a04f5dadd49e362901835e118ea6548beb0bd4c86ca6dd87dff5cfc62a70e
SSDEEP

3072:r+jYImfSj8lTxReQ3GKdhCUZMpvGyGOsp0FyzcR:r+jYfSj8FK0GUhf2VGOspKmcR

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.df3e62f76eb5ef3711c50b788a0bd1c0.exe

Files

NEAS.df3e62f76eb5ef3711c50b788a0bd1c0.exe
.exe windows:4 windows x86

5bd67aea7f5a3e05ce66c9a23118a6b6

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetPrivateProfileIntW
PulseEvent
GetCompressedFileSizeTransactedA
GetFullPathNameTransactedW
BaseUpdateAppcompatCacheWorker
BasepGetAppCompatData
GetComputerNameExW
ReadFileEx
NeedCurrentDirectoryForExePathW

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 105KB - Virtual size: 126KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE