NEAS[.]52817d3b68e4a82f1b3e4772ad341f90[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.52817d3b68e4a82f1b3e4772ad341f90.exe
Size

66KB
MD5

52817d3b68e4a82f1b3e4772ad341f90
SHA1

79bd41e6568acc6f8aec1d355633421a8a0d02b1
SHA256

101ebae2a0435b19b91bc6320f26c3ced6d71e41a00b03c34ef4cf4ba6e86a72
SHA512

c4c9337ec59e265ff922b61ecad7493b1a7cac5ff193c063683e7253c5563898739c6b1cbdb0165d2ab4db0a1bb19a07d8f77424fad7f8840de96fe56d682185
SSDEEP

1536:1qzqZhhm1+b7CQmOB18OJt9xoAJbMJQlxRgG4jwju:gqZhhm1+69K1vxxogIcRgfwju

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.52817d3b68e4a82f1b3e4772ad341f90.exe

Files

NEAS.52817d3b68e4a82f1b3e4772ad341f90.exe
.exe windows:4 windows x86

20c5775875f3d15f0ee7a7c22d1e92cd

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateTimerQueue
WriteConsoleW
RegisterWowExec
GetPriorityClass
LoadLibraryW
GetStringScripts
GetDateFormatW
_lcreat
SetConsoleScreenBufferSize
Wow64GetThreadContext
FindFirstFileA
K32GetProcessImageFileNameA

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 51KB - Virtual size: 70KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE