649616dce639d2f7f3cc58f313055610_NEAS | Triage

Sharing

Copy URL Twitter E-mail

General

Target

649616dce639d2f7f3cc58f313055610_NEAS
Size

71KB
MD5

649616dce639d2f7f3cc58f313055610
SHA1

ffe4d4af77392fd76f28ee3194748aba629fa6d8
SHA256

266277e62bfb066f6f3f5558796b8650db2f4834f87416e0c54ee4bae5843e00
SHA512

2ee8959f8e5c330c2c0a7b693558fe3fe91f2517c131bc04e0f2c33d5a1af6e0d97cd01e920b7c4abc253d392d247d5766b7d6d7135db50750b6c6a3e30728ce
SSDEEP

1536:xWNIqmK4+Ur56Wb4QBaBsDvvQQa6cQwZEC/n3ZVJe2iH3nMSgf3:xsrn4+46AaaDvIQa6/DeZVJhKMf

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
649616dce639d2f7f3cc58f313055610_NEAS

Files

649616dce639d2f7f3cc58f313055610_NEAS
.exe windows:4 windows x86 arch:x86

cb4670a5d4eeb37a4df6f95782c45ccb

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadResource
TermsrvSetValueKey
AppPolicyGetWindowingModel
EnumCalendarInfoA
CreateMutexW
FindNextChangeNotification
CreateDirectoryTransactedA
SetUnhandledExceptionFilter
GetFileAttributesExA
RegSetKeySecurity

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 56KB - Virtual size: 94KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE