NEAS[.]d5471cbb56e16feddf9039265deafa30[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.d5471cbb56e16feddf9039265deafa30.exe
Size

320KB
MD5

d5471cbb56e16feddf9039265deafa30
SHA1

41b2dca75a57475720ba60b443c24d73bc25033a
SHA256

25fdc2ba8eb4eb29f6a06042adb355213e6bf09f7d84797f364607f39682c0fc
SHA512

e981bfc356100efda4c80bdf7dd1716d0ddcaf0ffb3ba2afd173cf05c2dc6f382aec9752a398e42ff20c1f951d8f438bfcfbc11ca997fe46aafc502d4ab180da
SSDEEP

6144:vgnblH2RfS155ONNXBuWoJBO9OMbHLkAqF7Ief9UmM7/uT:vgnb12EB0NxDIBuOFe7/uT

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.d5471cbb56e16feddf9039265deafa30.exe

Files

NEAS.d5471cbb56e16feddf9039265deafa30.exe
.exe windows:4 windows x86

b1bfd83de9a1f28e7126e8d845698009

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

WinExec
DnsHostnameToComputerNameW
VerSetConditionMask
GetConsoleWindow
GetNlsSectionName
LZOpenFileW
CreateNamedPipeA
OpenDataFile
ShowConsoleCursor
GetAtomNameW
GetConsoleInputExeNameA

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.brdata
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tc
Size: 244KB - Virtual size: 244KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE