NEAS[.]51d58594b1930593e67fd38ef620b310[.]exe | Triage

Sharing

General

Target

NEAS.51d58594b1930593e67fd38ef620b310.exe
Size

119KB
MD5

51d58594b1930593e67fd38ef620b310
SHA1

283a87ca908a255e8c44652d7fac8fab2a31d023
SHA256

944e829d8fe5711c90cdcd28adff1f8750f20841fc80f62b5b5f20985cd88d0c
SHA512

ba93b9d603c6f5f33be441bba75f3cd8f6de129725c624151c55e52c4347064273962a4143adccedc90bbf1e27c8f86ba9bccd8d4a0d6f3ba8257cfedf4f2694
SSDEEP

3072:BGO0w4jF4gKh4SK1GqdWXOikv82fp+uN3K2EMzDFb6:BQw4x4pzKzWXvkvrFEat6

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.51d58594b1930593e67fd38ef620b310.exe

Files

NEAS.51d58594b1930593e67fd38ef620b310.exe
.exe windows:4 windows x86

18f8c024313f9392170e6dd6fc35c399

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

EnumResourceLanguagesA
GetThreadId
VerLanguageNameA
GetCurrentActCtx
VirtualAllocEx
EnumerateLocalComputerNamesA
lstrcatW
GetAppContainerNamedObjectPath
ConsoleMenuControl
LoadStringBaseW
FindFirstFileTransactedW

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 105KB - Virtual size: 126KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE