NEAS[.]c917503a54cd98f96296b8852c3e81e0[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.c917503a54cd98f96296b8852c3e81e0.exe
Size

66KB
MD5

c917503a54cd98f96296b8852c3e81e0
SHA1

1cc5e8f4f484203bf65c6a1cda73435e32f1b565
SHA256

9f2dc977dd07fe50629bac2e4d1134060119a5ad8c99a31f07d39d23fe383617
SHA512

ae5516afe2d90f0db4c8d0ff7cf0bc302066c6f610786a7d993b8746a613c1367b0257d26d66ef47eb81c8f83b88838a44e7533e2ec0ae4e000a004a81b0207a
SSDEEP

1536:CBUsLPSuBYbfWAzZ4p6NEe0KvKeZH3+IwwmpSetYN5N7LdJy2GZ1K+mmVsMYkvvG:fAUeG/6K7f1qd5heyfXT0

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.c917503a54cd98f96296b8852c3e81e0.exe

Files

NEAS.c917503a54cd98f96296b8852c3e81e0.exe
.exe windows:4 windows x86

1209cb371636e8b52401ea3276510ffa

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

EnumDateFormatsExW
SetCriticalSectionSpinCount
K32GetPerformanceInfo
GetProcessDefaultCpuSets
GetCompressedFileSizeTransactedW
FatalAppExitW
DeviceIoControl
SetConsoleOS2OemFormat
UpdateResourceW

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 51KB - Virtual size: 70KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE