NEAS[.]aca0c08808e649085ac787b69fc59760[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.aca0c08808e649085ac787b69fc59760.exe
Size

66KB
MD5

aca0c08808e649085ac787b69fc59760
SHA1

fd8fd13aed0e2d5a385b803af7ee2d261524733b
SHA256

63a5bccee6b3bbde73e068507c8551e75fcb31824db949cb1c4ff163f56042ee
SHA512

3765d7370eacc33b04f403bd0c357a1c177fc503d090329c743c028422ae6741c4d8bdbe80bccf1de87977095954563e3a4eac8cfd253cb989ae9437e39da7ee
SSDEEP

1536:zsH0+NH4n0a0FtD00vgmc2DlBRSvx6rtpubY//AU4n:M4SD0GgmBDTR0kqO4n

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.aca0c08808e649085ac787b69fc59760.exe

Files

NEAS.aca0c08808e649085ac787b69fc59760.exe
.exe windows:4 windows x86

4faacd63b30e9d5f43714cefea341538

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetSystemInfo
CheckTokenMembershipEx
SetCalendarInfoA
SetThreadAffinityMask
EnumCalendarInfoExA
OpenFileMappingA
WerUnregisterRuntimeExceptionModule
TermsrvDeleteValue
OpenWaitableTimerW
GetVolumeNameForVolumeMountPointA

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 51KB - Virtual size: 70KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE