45294b24b977132ba409018a7ead9c10_NEAS | Triage

Sharing

General

Target

45294b24b977132ba409018a7ead9c10_NEAS
Size

56KB
MD5

45294b24b977132ba409018a7ead9c10
SHA1

8290a2e1092d3100308545dc51450ad99c7f285c
SHA256

a25a377e624694fc78c834665b537c1fb5f985a7181095ca215bf8e7f7143337
SHA512

32e1874c32498909fe7f81201e8c1fae89d683d2217ec60de68ad9d6affbc8f2b58455fbec7b72ba8c6b4103f17282d3d5f8437e591447ad0555905c2baca86c
SSDEEP

1536:Fc2onE6AN45xs60hBPJLdVP4e23DcT8lZuszI40GsX4Qm:zoEjancTZ8lhE40Gsoj

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
45294b24b977132ba409018a7ead9c10_NEAS

Files

45294b24b977132ba409018a7ead9c10_NEAS
.exe windows:4 windows x86 arch:x86

6818d0cc006eeb3daaa2d405d1964b51

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetThreadUILanguage
K32EnumProcessModulesEx
SetTermsrvAppInstallMode
VerSetConditionMask
GetNumaNodeNumberFromHandle
WaitForDebugEvent
GetDefaultCommConfigA
RemoveDirectoryA
AddResourceAttributeAce

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE