NEAS[.]c5bf951432b6164527e0d4e688b047f0[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.c5bf951432b6164527e0d4e688b047f0.exe
Size

66KB
MD5

c5bf951432b6164527e0d4e688b047f0
SHA1

ba9fb7668a3c52ddb5f12288fe34f93f3f24e8ac
SHA256

368cc69d67820538787be6dc37248ecb0c9727224a3a76b1f6a5e021ca03e529
SHA512

64d0ff18a7f712dd6a90a3724c9054da0faf6ef8db16f5c33f6b8c2cce43b5e90e77a3d32b258137251beaaa532623952e3a9d136e090b613fd5867771c37f6a
SSDEEP

1536:JhRRRCS+fGMdRhhFeGLtIsFmvcX8iAm1mymunrLl0bUQwaj08aiDV:zNCxfGMdRhfePEzJPmS8ZjRDV

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.c5bf951432b6164527e0d4e688b047f0.exe

Files

NEAS.c5bf951432b6164527e0d4e688b047f0.exe
.exe windows:4 windows x86

9563b3576eca918a89f4a19a154dfde4

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ReclaimVirtualMemory
MoveFileExW
EnumUILanguagesA
WritePrivateProfileStringW
MultiByteToWideChar
BackupSeek
SetConsoleNumberOfCommandsW
EnterSynchronizationBarrier
GetComputerNameW
GetDefaultCommConfigA

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 51KB - Virtual size: 70KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE