NEAS[.]45c1dbd8a07dbc1e1f829e1d20b13330[.]exe | Triage

Sharing

General

Target

NEAS.45c1dbd8a07dbc1e1f829e1d20b13330.exe
Size

92KB
MD5

45c1dbd8a07dbc1e1f829e1d20b13330
SHA1

f5ca5b0b5feb447d0bd71c89341c0f551e702b80
SHA256

254e10253abb35ed25bc50acae55d9d533aa4751f8f2be9d5a33ceaabe7359dc
SHA512

ad5a44fcf14576d696ad5df39c163e32c7dbe2c50b18194dcb2e933fe100601280e1344f77a9ca2e536d86b5ecf310402005025d04281bea72055ebb976827bb
SSDEEP

1536:0SwCM3/5BbSoo8PV0IU11bmgwuiM4yZ83YacIyP/69QAq0Gb8/Z5H83oKz:VJAhB08PWjHiM4iKYBbWq0GQP0oKz

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.45c1dbd8a07dbc1e1f829e1d20b13330.exe

Files

NEAS.45c1dbd8a07dbc1e1f829e1d20b13330.exe
.exe windows:4 windows x86

121abe9458bb756227456d6560e0ef4c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CopyFileA
RequestDeviceWakeup
CreateDirectoryExW
PurgeComm
FreeVirtualBuffer
GetFileType
GetTapePosition
LoadLibraryExA
GetNumberFormatW
SetFilePointer
GetExpandedNameA
AssignProcessToJobObject

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Size: 36KB - Virtual size: 64KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Size: - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE