NEAS[.]5a4b9a912575c3a790774ec7419a8560[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.5a4b9a912575c3a790774ec7419a8560.exe
Size

61KB
MD5

5a4b9a912575c3a790774ec7419a8560
SHA1

2352d6663a0c88428bed0e81fc8a4fa354e15b96
SHA256

76168a596066bd7eafd2a9400f0f918d8e03829fc6a6ae911107200d7a807af0
SHA512

4296fee74479cbd4dbee37ee6daa2054ac5c43600de4ff05627ab82854fad2466017221beaab2089ced34e2b6e20393acacd72f2710ae38aa081889711b8f283
SSDEEP

1536:3fiBUZU4FTEI+/u8JU3RiZL8oUC2w3MIw:3fi+FQI+/i3QZIodc5

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.5a4b9a912575c3a790774ec7419a8560.exe

Files

NEAS.5a4b9a912575c3a790774ec7419a8560.exe
.exe windows:4 windows x86

48ca9d843af0df716b9ee1e4a09824cc

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LCMapStringA
OpenConsoleW
SetThreadAffinityMask
GetEnvironmentVariableW
IsWow64Process
DebugSetProcessKillOnExit
CreateDirectoryA
AllocConsole
GetNlsSectionName
TryEnterCriticalSection
GetConsoleCommandHistoryLengthW

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 47KB - Virtual size: 65KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE