NEAS[.]5c08b53469c85eee5879c734e6fd8650[.]exe | Triage

Sharing

General

Target

NEAS.5c08b53469c85eee5879c734e6fd8650.exe
Size

66KB
MD5

5c08b53469c85eee5879c734e6fd8650
SHA1

b87ead17a0dd3b9cfd43f8d107836abbba73c6f0
SHA256

eed1b53c637eb1194829140f13c11bf3b8fd5179145d0e6dd966955cf268e718
SHA512

f64f6d618e4a0a96385535f1e5aac06eb5158a139a130dd8e24c17c55fe5b6a80bf50ef07bbe81e7a3abe9c81b5834550b0c674fdf602a395cbb593fa4324fe4
SSDEEP

768:ynFwl2YGKTKBp1bjhHbnzi1TmMypsuPusN8B58Gh/ZMC1T9xA3p4uKaS3ideZFvW:ynFNmEgLuP7NGGcXMZxKNVWGlid9wu

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.5c08b53469c85eee5879c734e6fd8650.exe

Files

NEAS.5c08b53469c85eee5879c734e6fd8650.exe
.exe windows:4 windows x86

6a1ed0d22505b8fee8f82cce96f29a9d

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

Module32Next
IsBadStringPtrA
AddVectoredExceptionHandler
CreateSymbolicLinkA
CreateWaitableTimerW
GetThreadGroupAffinity
BaseInitAppcompatCacheSupportWorker
ReclaimVirtualMemory
OpenJobObjectA
FindResourceExW

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 51KB - Virtual size: 70KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE