NEAS[.]65a5b2130958260effa53183851da800[.]exe | Triage

Sharing

General

Target

NEAS.65a5b2130958260effa53183851da800.exe
Size

60KB
MD5

65a5b2130958260effa53183851da800
SHA1

19e2f33dc093747f6bef086e86f84a232a63567c
SHA256

1716e320a8a1097c942d2b085f856f1772aecd59dd829ed6dedcd717b808990d
SHA512

c1a531eba56013f03c922dfef4beb3c450378bad76fee9089ae367710241aee17b0d18d8b17f44a10ddc04db28b9b571a04a5f0710412a0f8a5184bffb185d2c
SSDEEP

1536:+t1VLakmAk/0uded22QwsMOvxteCmzQfRwViw:01VLpmVkFQvmCaQBw

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.65a5b2130958260effa53183851da800.exe

Files

NEAS.65a5b2130958260effa53183851da800.exe
.exe windows:4 windows x86

d9c8f3c2815dce4c4959b13befc08ab1

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SetConsoleLocalEUDC
LZInit
SetFileApisToOEM
GetVersionExA
CreateProcessInternalW
IsValidLocale
SetHandleInformation
GetComputerNameExW
GetCurrencyFormatA
GetConsoleProcessList
VirtualQuery

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 46KB - Virtual size: 45KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE