NEAS[.]0310e33a7e16a8949b6b569729a770a0[.]exe | Triage

Sharing

General

Target

NEAS.0310e33a7e16a8949b6b569729a770a0.exe
Size

119KB
MD5

0310e33a7e16a8949b6b569729a770a0
SHA1

8925624478e2e7d6d8b1d129c1eb3bbbbf9aa212
SHA256

5af3ca973ed90c4fd654b726dcd56f277030b41752d0a85bd74e64917794a390
SHA512

442517ae53b791719c16e648ef3431ea0b61ad17282415908737fe5d24ca4c9e6f75d78b78869b352118fdace033b635e8751c559a6c07b4819e9e2e9f1a61be
SSDEEP

3072:ZR6xZ72uWhWViAwOrW1ojXj/mgSkqEXRajLrUuwOBQ2:k72ThW8OFT/+kqdjLr3BQ2

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.0310e33a7e16a8949b6b569729a770a0.exe

Files

NEAS.0310e33a7e16a8949b6b569729a770a0.exe
.exe windows:4 windows x86 arch:x86

f181e8cc8538d6be0e91beeecba602ed

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetConsoleAliasExesLengthA
PssWalkSnapshot
SetVolumeMountPointWStub
GetCalendarDifferenceInDays
LoadPackagedLibrary
SetComputerNameA
SetSystemTime
AppPolicyGetCreateFileAccess
CreateFileA
SetProcessAffinityMask

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 105KB - Virtual size: 126KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE