NEAS[.]530a278c68e06efaa039c0776fb9f360[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.530a278c68e06efaa039c0776fb9f360.exe
Size

119KB
MD5

530a278c68e06efaa039c0776fb9f360
SHA1

c6c5515e47ca390b7352a79ad5caf9f7d8d3cafb
SHA256

da0382b7f878294a0ffb441622e96f18eacbca33ee0540cb193721f018a7c645
SHA512

4147c65e7a00d11c2307a689d65aea59a79632ee953f7d86df45b110e3c2864ad4eb5a7cb0f70134ac48e97f3c0a94b617733f17d7e3247d482df0e190836c85
SSDEEP

3072:QXRN1SEJ2NofkPgSn+0qGV1cUE2xeZ7kwMbxKvC9:619fhqfw2xegwQ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.530a278c68e06efaa039c0776fb9f360.exe

Files

NEAS.530a278c68e06efaa039c0776fb9f360.exe
.exe windows:4 windows x86

7f0ce1ed9a8b083c7ab638f6340241aa

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetApplicationRestartSettings
GlobalReAlloc
GetActiveProcessorCount
GetUserDefaultLocaleName
OpenState
GetStringTypeW
RegOpenKeyExW
GetLongPathNameW
LockResource
ReadDirectoryChangesExW
GetEnabledXStateFeatures

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 105KB - Virtual size: 126KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE