NEAS[.]5605d208ec8f189fc2f5fdc867d55fc0[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.5605d208ec8f189fc2f5fdc867d55fc0.exe
Size

63KB
MD5

5605d208ec8f189fc2f5fdc867d55fc0
SHA1

961a05d3db54cc88bc69f2edc393dd9ca86a6b15
SHA256

6f0cad4f291ada18a9b5728cb24be9221d2135083879e98c8345b08b3e19c902
SHA512

dfec728fc0b8d68025f725846a2b9f081a097c2b257b132941d46f38d3dba7c29655e6e1129c0d04c87329c41305e510a598a768dc55493bb093387eec4232c2
SSDEEP

1536:DFqJT5xfcghMgRCnujbTHTZAP8xxV9MVnZvPP+:wJtWJgRCujb/ZnV4nJ+

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.5605d208ec8f189fc2f5fdc867d55fc0.exe

Files

NEAS.5605d208ec8f189fc2f5fdc867d55fc0.exe
.exe windows:4 windows x86

4384ee5361c6842d564e2b3553384c16

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

Heap32ListFirst
GetTapePosition
GetFileType
LocalFileTimeToFileTime
GetDateFormatA
FindVolumeMountPointClose
GetSystemRegistryQuota
GetTimeFormatA
GetTapeParameters
GetNumberOfConsoleFonts

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 49KB - Virtual size: 70KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE