NEAS[.]5b9e5df6a4b8b2fdc11c7b8fbc33bcc0[.]exe | Triage

Sharing

General

Target

NEAS.5b9e5df6a4b8b2fdc11c7b8fbc33bcc0.exe
Size

66KB
MD5

5b9e5df6a4b8b2fdc11c7b8fbc33bcc0
SHA1

c7e7d938116c9908e5272c0b7dbb3ee7406493eb
SHA256

92d907e00da07de2d6b98e9f96398ee27b3d0aa11949d99c867ff78337dca7f4
SHA512

4114cf1bea8c042d9e3e64dcb6ce9b4c8053c076c6f4898cd5d95818ad8176d746f67836c3e8c1f9d3277c6bd6f97c4190ea59200888ec97e1815f880b6db791
SSDEEP

1536:bDkfKfa1EvudWY6STLyKB0q/nedkhx7cWdKmvg76jX:bDkf4vudc8Lr/eqvgG7

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.5b9e5df6a4b8b2fdc11c7b8fbc33bcc0.exe

Files

NEAS.5b9e5df6a4b8b2fdc11c7b8fbc33bcc0.exe
.exe windows:4 windows x86

6b45253baecc358e7a35b683a4b8b691

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SetIoRateControlInformationJobObject
GlobalAlloc
SetEnvironmentStringsW
GenerateConsoleCtrlEvent
EnumTimeFormatsEx
ReplaceFileA
GetCalendarDateFormat
ReadConsoleOutputAttribute
TzSpecificLocalTimeToSystemTime

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 51KB - Virtual size: 70KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE