NEAS[.]6216f88e5e45a03a7016aa2919ce9980[.]exe | Triage

Sharing

General

Target

NEAS.6216f88e5e45a03a7016aa2919ce9980.exe
Size

119KB
MD5

6216f88e5e45a03a7016aa2919ce9980
SHA1

9527454cdcde2ea00a81298e6aaca4e9d339b671
SHA256

3507da801adb04beb52d9f770434a88b7c0760caa44e99da783816d96f61b750
SHA512

abb85ba6434fd1115c1c2af8c4557a4f69e8509a6db7e141d2c285946feeac812afc97eae1cd7ce7134f49ab04ecc4b459cde489efe5d43d6e79ed069f8a3882
SSDEEP

3072:HMYoIVAfOqsjKHTIDxNI6w+8s/Sczqhd7yf3Sh:HMLIDKs7MZh8fa

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.6216f88e5e45a03a7016aa2919ce9980.exe

Files

NEAS.6216f88e5e45a03a7016aa2919ce9980.exe
.exe windows:4 windows x86 arch:x86

b804883b3324abda101e7e6edf4fa401

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

QueryPerformanceCounter
SetVolumeMountPointW
CreateFile2
OpenPrivateNamespaceW
GlobalFree
AddRefActCtx
IsCalendarLeapYear
GetEnvironmentStringsA
GetPackageId
GetDllDirectoryA
LoadStringBaseW

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 105KB - Virtual size: 126KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE