NEAS[.]2a5312c844927a0b45dd2bd8aaa2c5d0[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.2a5312c844927a0b45dd2bd8aaa2c5d0.exe
Size

119KB
MD5

2a5312c844927a0b45dd2bd8aaa2c5d0
SHA1

f7d62f86526766163983f97c39aa1d9f0da94aa0
SHA256

a384163a841373a99735f61c09112131ad38443f3db9dd0e89113d177bf42cbd
SHA512

02f96bbaec21f75b54617fa4d9fe18549fe795ef38018438a54d903f5106002cb50470c6407129df465645b6c7c877735abb0499aee526566bc421109a5c2c7d
SSDEEP

3072:Q4r40DgJNS4wbaLFZfDO0kGfkdjqixmcBCgWXiOr3O32:Q4hgJNyoZrIikdKlg6OG

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.2a5312c844927a0b45dd2bd8aaa2c5d0.exe

Files

NEAS.2a5312c844927a0b45dd2bd8aaa2c5d0.exe
.exe windows:4 windows x86

d731a27c57f06543bbd62213431faa8f

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetThreadSelectedCpuSets
LZRead
GlobalFindAtomA
VirtualProtect
WerUnregisterCustomMetadata
FindResourceExW
EnumSystemLocalesEx
TrySubmitThreadpoolCallback
QueryThreadpoolStackInformation
QueryFullProcessImageNameA

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 105KB - Virtual size: 126KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE