NEAS[.]47a225a31986a124f51043b6aef82300[.]exe | Triage

Sharing

General

Target

NEAS.47a225a31986a124f51043b6aef82300.exe
Size

119KB
MD5

47a225a31986a124f51043b6aef82300
SHA1

6780956edc52b092632a0c9396614c19c0c33d36
SHA256

369badc4c6e2c5738b142ee070731f5042a823c5154c871f3bec9303ef84f541
SHA512

43f4501bb42aed31471c7d51bd4c2778c89232e128c81060b7666aa6317f32f63bb2033db29cf63f231918737afff14a001961c05f250bc627bb37addb3d69b6
SSDEEP

3072:OxHm83CB/55vAh1lnxivPqjpBEKQDZsTFp3HhD:OxG83E/7AFQaVlQDZ8Fp3hD

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.47a225a31986a124f51043b6aef82300.exe

Files

NEAS.47a225a31986a124f51043b6aef82300.exe
.exe windows:4 windows x86

c9cbbbe1a09fd6d97ee306e8605f2985

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LZClose
GetCommConfig
SetDefaultCommConfigA
AddAtomA
RemoveDirectoryTransactedA
StartThreadpoolIo
IsCalendarLeapDay
SleepConditionVariableCS
MapViewOfFileFromApp
BasepCheckAppCompat
FindFirstVolumeMountPointA

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 105KB - Virtual size: 126KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE