NEAS[.]4b8f4d5ab6c6ca13efdd0ae59d9c4230[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.4b8f4d5ab6c6ca13efdd0ae59d9c4230.exe
Size

119KB
MD5

4b8f4d5ab6c6ca13efdd0ae59d9c4230
SHA1

bd4c9d9a80ee714d85e1550b50058c10457d1a61
SHA256

fcf56edb348d5823e0e98ddaa659aacde2a8dff56e2b3fdb890f8aa69cb6898e
SHA512

4f438578db7f35b42d4bb73ca72b80a6e25682e35eec529c067d4380544715197ab22b7e83221e70a07e9e5b0681ab6aefc318cb9f5500efdd6c2de68f3710be
SSDEEP

1536:nPworu6x4JTpx2BlmOVeqkqnFTfHf4OxuZI5gEoJCK8YhxaZBvyv048qIflaNZfe:J3q2B7VnF7AOEZcVoINvyz8QZLGFqC

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.4b8f4d5ab6c6ca13efdd0ae59d9c4230.exe

Files

NEAS.4b8f4d5ab6c6ca13efdd0ae59d9c4230.exe
.exe windows:4 windows x86 arch:x86

4ba63fc62cd490ca374e546d62bd7d21

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

EnumSystemLocalesA
EnumResourceNamesW
MoveFileWithProgressW
GetAppContainerNamedObjectPath
GetEnvironmentVariableW
GetCurrentPackageId
GetConsoleKeyboardLayoutNameW
FreeMemoryJobObject
GetCurrentProcess

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 105KB - Virtual size: 126KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE