NEAS[.]e4c877d1875671b4360275111bd2dc10[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.e4c877d1875671b4360275111bd2dc10.exe
Size

119KB
MD5

e4c877d1875671b4360275111bd2dc10
SHA1

bca5fe21309385c11beb4262e988a24edf09e7f5
SHA256

1c861663a5790147f5927b0b29e12662ea60fd4a323a178a280c5cb1bee4a979
SHA512

de7d304d992c53806203e33d691a2fcdf27e2ee65142f55d838a5f1e0a7fa04d4d992e3181e8fc812fb27c981a3f35e246937da36e89f648d4980d5624f19129
SSDEEP

3072:TkVl8OJtSkthGA/0Yb8XvQQRyV3AM2vPgyuu/cge:TkoOVthTs88XvxRyVQM2Ayncp

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.e4c877d1875671b4360275111bd2dc10.exe

Files

NEAS.e4c877d1875671b4360275111bd2dc10.exe
.exe windows:4 windows x86 arch:x86

a6366869e8ce555e31a5ba67cda8701b

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

TzSpecificLocalTimeToSystemTime
GetFileAttributesExW
PackageNameAndPublisherIdFromFamilyName
EnumResourceLanguagesW
RequestWakeupLatency
EnumResourceTypesExW
MapUserPhysicalPages
GlobalAddAtomW
GetCompressedFileSizeTransactedW

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 105KB - Virtual size: 126KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE