NEAS[.]c180c26ce1b4d42ee8cb668bab244540[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.c180c26ce1b4d42ee8cb668bab244540.exe
Size

66KB
MD5

c180c26ce1b4d42ee8cb668bab244540
SHA1

17f20632c48b9a2cd7128fea0e247f4e3cb7cd5f
SHA256

8ab98d063e5f1b1224981f99863a801bc9c32fe7a265cdfa9962435676b8fcc1
SHA512

3185b3a8e8d71b805d29b239850c227b8bfd838f5eb1c4b96d6190f238f9c037675fea214895611a1b70926839c730020eaec05d630ab5535c4668cb8b925b5d
SSDEEP

1536:PlU0sy3kFkKgM8N4mpUFZMXh6mO62l3om:PefKC24mpXh7ORlH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.c180c26ce1b4d42ee8cb668bab244540.exe

Files

NEAS.c180c26ce1b4d42ee8cb668bab244540.exe
.exe windows:4 windows x86

96029fda5407ba96b0db563bae781ca0

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetConsoleKeyboardLayoutNameA
WriteConsoleOutputW
SetDefaultCommConfigW
SetThreadpoolWait
DeleteTimerQueue
ExpandEnvironmentStringsW
IsCalendarLeapYear
AddAtomA
AppPolicyGetCreateFileAccess
StartThreadpoolIo

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 51KB - Virtual size: 70KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE