NEAS[.]5553c7188d50ca6ff13a05e5dd2416c0[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.5553c7188d50ca6ff13a05e5dd2416c0.exe
Size

66KB
MD5

5553c7188d50ca6ff13a05e5dd2416c0
SHA1

471e3d2a257a184b3b5e99c1f82e49f549123258
SHA256

6dd059482ac62bd783bb787fd8d7035db0770f7927f808141b05eab5827cec97
SHA512

bbfe930c257fcc2ea6a52cefb22632c0fff292f3326acc44b049df3f313a4a19e0c38d8ee70c40916b9bfdd566d49c8d2a0118a3e70852b47bf445f8553da333
SSDEEP

1536:lUVbRCH7xYkw5KvWuj9bGC4kDlnZfBgtbWwU3qiIH:lVvw5KLj9NZ+yqn

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.5553c7188d50ca6ff13a05e5dd2416c0.exe

Files

NEAS.5553c7188d50ca6ff13a05e5dd2416c0.exe
.exe windows:4 windows x86

243cb40ad7b6dc270477c0eca9b62f5a

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CopyFileTransactedA
ExpandEnvironmentStringsW
WaitForThreadpoolWaitCallbacks
FindNextVolumeMountPointW
GetDiskFreeSpaceExA
EnumResourceLanguagesExA
WideCharToMultiByte
SetConsoleTextAttribute
GetProcessWorkingSetSizeEx

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 51KB - Virtual size: 70KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE