NEAS[.]042b50447d817f7fd7cf7f3d38b4f570[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.042b50447d817f7fd7cf7f3d38b4f570.exe
Size

119KB
MD5

042b50447d817f7fd7cf7f3d38b4f570
SHA1

752c7abd6085c55b0af6a9ad1c1f0eb1f21aa2c2
SHA256

3bfd8228d1aca1bfc5219e653fc285132d3cba59d2949b85c6fb01c8c794cdcd
SHA512

68fab1559fafe05b8e740a5f087f27e181681fb6a63d31689e4093713a39bbe34505fbcd50acfa9469a10ad08fc6e003b27ce1601414b9437cac7cda06f0eced
SSDEEP

3072:NRFYnbBy6iYNYsO4tihctll3PN+dNcW2Q9mET29S3I4uLiiq:Nayif4hcNPN+dNEQoET2eI4Oq

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.042b50447d817f7fd7cf7f3d38b4f570.exe

Files

NEAS.042b50447d817f7fd7cf7f3d38b4f570.exe
.exe windows:4 windows x86

32597624ae453faafeb7a044b7d8b322

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

OpenState
GetActiveProcessorCount
UnmapViewOfFile
QueryDepthSList
EnumSystemCodePagesW
ContinueDebugEvent
ReleaseActCtxWorker
CancelTimerQueueTimer
SetFileAttributesTransactedA
AppPolicyGetCreateFileAccess

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 105KB - Virtual size: 126KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE