NEAS[.]93f219410cc71db475dfb52ba2168900[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.93f219410cc71db475dfb52ba2168900.exe
Size

119KB
MD5

93f219410cc71db475dfb52ba2168900
SHA1

b0b3c05d190d61a9bd2ec04c4e3a3c8b675a3c17
SHA256

062480167761bf5ed22fab5be46cf19bdb0e5b7ca7fba954ef79860efab2517d
SHA512

992958617866e236eadf36c68ee8c97415f4b8b0c798ea56b372edd1a813a9998e55f0678f57df3402588e2f75479384c27b8711e06d78fdfa4bcf5ab9a15b70
SSDEEP

3072:SmAAXC1YyhkvKMJK/3ukwCDHl8NnxFNFbbjwfeukQKJtU7:SAX8bevKMJkukPF8bFbbjkeuxetU7

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.93f219410cc71db475dfb52ba2168900.exe

Files

NEAS.93f219410cc71db475dfb52ba2168900.exe
.exe windows:4 windows x86

c5af39072797a33b51876763b2a89606

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

FileTimeToSystemTime
ParseApplicationUserModelId
RegEnumKeyExW
DeleteFileW
RegisterWaitUntilOOBECompleted
LoadPackagedLibrary
GetConsoleNlsMode
GetConsoleScreenBufferInfo
K32GetMappedFileNameA
BaseFlushAppcompatCacheWorker

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 105KB - Virtual size: 126KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE