NEAS[.]5e76dd6d12a698f6e843475df1bea940[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.5e76dd6d12a698f6e843475df1bea940.exe
Size

119KB
MD5

5e76dd6d12a698f6e843475df1bea940
SHA1

f2559923f5f3b726b3be3a2cfac56e9ad613017b
SHA256

49cf6a1b8ee2e8fb73df44aef4897ab43237640e745eca2a7606bfb03eb16dbe
SHA512

a9b2415108a50ec24a5d57ff5f1e25b62e83f2ed4414ca503e1d441d0b362b76761e7dea1df40a691120149966ef5e18b0f2d292c69e399e3bf0bdab63e37d3e
SSDEEP

3072:QYfmw9WyiaRtgfK1VFQGhECl2ZYANYOvoDO+uMtEP:QYf9wUtKKNLhVlqHzvBZ9

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.5e76dd6d12a698f6e843475df1bea940.exe

Files

NEAS.5e76dd6d12a698f6e843475df1bea940.exe
.exe windows:4 windows x86 arch:x86

1658aa5a5d4359748e8850039901b10c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

WerUnregisterRuntimeExceptionModule
SetVolumeMountPointWStub
GlobalAddAtomA
CloseProfileUserMapping
RegOpenKeyExA
AddSIDToBoundaryDescriptor
DeleteBoundaryDescriptor
SetFileAttributesTransactedW
GetProcessHeaps

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 105KB - Virtual size: 126KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE