NEAS[.]53c95312ab950709f649e45207f73390[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.53c95312ab950709f649e45207f73390.exe
Size

91KB
MD5

53c95312ab950709f649e45207f73390
SHA1

39b5017862796a56975085b6d450843017466904
SHA256

fddb5e1b0f07d0ddea92b1c0b948736fc7cb8b084dec435d762937a1cf451351
SHA512

c65155c303ae04339c34c730f2095d26657c7108a91a165eac2801a0ec62f74acb5423a6de6995e62cee292663bdeced6b29fe4d7db61eb0d63983b2bb26b03f
SSDEEP

1536:422rGODF/xB9gSIHO9Kt1uxelZgr2g5cW6jagF0Mo3Pe931eZ9GV:arGODnyO8oxelZy5cagBo3Pe9cMV

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.53c95312ab950709f649e45207f73390.exe

Files

NEAS.53c95312ab950709f649e45207f73390.exe
.exe windows:4 windows x86

d9116658b974112c5afa8e20e1e977c4

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

MapUserPhysicalPagesScatter
GetStringTypeA
ReplaceFileA
Beep
FileTimeToLocalFileTime
GetVersionExW
_llseek
CreateNamedPipeW
DisableThreadLibraryCalls
WriteConsoleInputA
WriteConsoleInputVDMW

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 77KB - Virtual size: 94KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE