NEAS[.]04562d072a00dd4d03fc18678316b440[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.04562d072a00dd4d03fc18678316b440.exe
Size

119KB
MD5

04562d072a00dd4d03fc18678316b440
SHA1

43c49e476e9cbeccc3f94c77e01debd7e21b8181
SHA256

2b21e1f1cfae799919d2bdf285ce3fd370a774c2baa8b17bd528270efe03e677
SHA512

a0912e7f58a2bda97f3a21c49ebd5cd62e29f8eaa6be465d80fd9c04e4dab7d5357c6780e0b61f69ada5844c44cfd420e5e65971c8f06cc7678209173990a911
SSDEEP

3072:QfCQLjsl2vZekZ9cZteLn4oxvWT22cEnOn3s7fWSwR6FYrXHq:H6jU2okXyeL4oxar/n2s3wZK

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.04562d072a00dd4d03fc18678316b440.exe

Files

NEAS.04562d072a00dd4d03fc18678316b440.exe
.exe windows:4 windows x86 arch:x86

ffbfc094c63c2ef47c9170a6dba4ea6d

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SetVolumeMountPointW
UTUnRegister
InitializeConditionVariable
FindVolumeMountPointClose
SetProcessPriorityBoost
Wow64RevertWow64FsRedirection
GetSystemCpuSetInformation
CommConfigDialogW
GetLongPathNameW

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 105KB - Virtual size: 126KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE