NEAS[.]c9a5bf38c0d4fc50dd1d2022cfb19360[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.c9a5bf38c0d4fc50dd1d2022cfb19360.exe
Size

66KB
MD5

c9a5bf38c0d4fc50dd1d2022cfb19360
SHA1

b24d5e99a338bbedee1581634577de6a58f6c598
SHA256

65b490fbf0f0f8de368ddc372b3bfc8e241a312c9231984b1f5617f1489338f8
SHA512

02071a2b886e5aa1290d6e9e5ea2f3df35295db638d2e0cf27770ce1b66677afa1154df369e7f052d6bc574d12b4e4ed855ba31e658536bf1393974eb95b0327
SSDEEP

1536:T3xw8Qf6NorXYueEbBpfY+PaMW9ymUT5wvBR/6k:LxcfFrXrjraB9yPT5YR6k

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.c9a5bf38c0d4fc50dd1d2022cfb19360.exe

Files

NEAS.c9a5bf38c0d4fc50dd1d2022cfb19360.exe
.exe windows:4 windows x86

35bb2f64fa02a2382dc2ae5326d1c59f

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

PssWalkSnapshot
SetConsoleLocalEUDC
CompareStringOrdinal
WriteConsoleInputW
QueryIdleProcessorCycleTimeEx
Module32Next
Thread32Next
GetCalendarDateFormat
GetCompressedFileSizeTransactedA
GetPriorityClass

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 51KB - Virtual size: 70KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE