NEAS[.]b59c174588958985e6e3759d988e4a60[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.b59c174588958985e6e3759d988e4a60.exe
Size

66KB
MD5

b59c174588958985e6e3759d988e4a60
SHA1

9f56ff2f7176395c1259c7ab16db13bb22843116
SHA256

05e28941d8bed4085b94d0e94a50262b63e5cc9b78c1fb484efcc104c4df79e9
SHA512

29c6dd001ddd0649b24a2b6d2d4da31702ea49e36c9840bd0d5323e20af43c722d0e42ea7f1a1645b429ed2bac75840071f5e61a37b53cfb3dae66a99608076f
SSDEEP

1536:hYianEG1lAXqkJ4LIECm+u3xMIRBJl1oHoXI/D6VUJRrmW:hYNEG1e6Fc3kBMoB6gSRqW

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.b59c174588958985e6e3759d988e4a60.exe

Files

NEAS.b59c174588958985e6e3759d988e4a60.exe
.exe windows:4 windows x86

e5f25a57992609542b77d2ebd3a04692

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

WerRegisterExcludedMemoryBlock
GetDateFormatEx
GetCurrentThreadId
GetTimeZoneInformation
FindCloseChangeNotification
SetLocaleInfoA
SetEventWhenCallbackReturns
GetStateFolder
K32GetModuleBaseNameA

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 51KB - Virtual size: 70KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE