NEAS[.]2969b4ec76dc3e0267a1b4be9530b6d0[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.2969b4ec76dc3e0267a1b4be9530b6d0.exe
Size

119KB
MD5

2969b4ec76dc3e0267a1b4be9530b6d0
SHA1

2bc1cdcc252ede6eacebbe73458aec7eb4e345fa
SHA256

af26fb3d100a7bf16803bdca8cd46995f0e98a5425d0e2f50184bd0f7eb97bd7
SHA512

487e285ba918e160ffa74571d04ee5b2da82d98e2a8bccceddd13b3522a4d85a2aac238d2f4acbcee6f7e180d9e59adb629e830201f187d77ea3b4f7bde08e33
SSDEEP

3072:YexYuCQE7cxLbCWaYIwmxVB3OQL4lZP8tV+XXtbUXA:YeWf7YLbCWaxVB3OQUfPa8XXtbJ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.2969b4ec76dc3e0267a1b4be9530b6d0.exe

Files

NEAS.2969b4ec76dc3e0267a1b4be9530b6d0.exe
.exe windows:4 windows x86

33c6fe4abb30e9a6b5fad3d520fc3418

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

BasepProcessInvalidImage
EnumSystemCodePagesW
SetFileIoOverlappedRange
GetCommandLineA
GetTimeZoneInformationForYear
BaseUpdateAppcompatCacheWorker
InitOnceInitialize
GetGeoInfoA
GetPackagesByPackageFamily

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 105KB - Virtual size: 126KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE