NEAS[.]c205c59d6bc6c6d7f7f9ddf634c084d0[.]exe | Triage

Sharing

General

Target

NEAS.c205c59d6bc6c6d7f7f9ddf634c084d0.exe
Size

66KB
MD5

c205c59d6bc6c6d7f7f9ddf634c084d0
SHA1

cf048e42e8dd901f6536b7e6c6ceef24d0ddaf11
SHA256

b8427fcdd869b2ddd65a39e777193afae3f0fc6a32ce45c1c565b0e4f4be3081
SHA512

bf98befe5ebbe18b57f88058af921cd575aa3f983d63f1e381e3b2c1c23e09bfa5067f3b953c9790d4f24b6b6baac32d661e4fd1ee72bbaa130511c5c010d45d
SSDEEP

1536:OsfA9fO5kuMtF01WrLYO175rE9v/NBVd7LMgkjE+1CPM0bj:5A9m5GqWrLYOYVlLMXE+IPpj

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.c205c59d6bc6c6d7f7f9ddf634c084d0.exe

Files

NEAS.c205c59d6bc6c6d7f7f9ddf634c084d0.exe
.exe windows:4 windows x86

0d65c56c03efba478f640a6d567af780

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

Wow64GetThreadContext
GetConsoleCommandHistoryLengthA
InvalidateConsoleDIBits
GetFirmwareEnvironmentVariableW
IsSystemResumeAutomatic
GetCalendarMonthsInYear
GetLongPathNameW
StartThreadpoolIo
SetVolumeLabelW

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 51KB - Virtual size: 70KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE