NEAS[.]5b53248d4764a6c8d117ed8c7855c6c0[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.5b53248d4764a6c8d117ed8c7855c6c0.exe
Size

66KB
MD5

5b53248d4764a6c8d117ed8c7855c6c0
SHA1

c584778759de1858bc6c310cc5345e44fbbd7bbc
SHA256

94d3345322b032d29708c642906c61fcaf4b4615797895270d748a885fef2110
SHA512

91ce25cf97cdab88df32d3050329d4df722d0799cbcbb61b2d4a1810ab654b4656d21d822ecca9ec4b152a8c83da28f0a00c85a6ef1d6545e4c2950c690ae273
SSDEEP

1536:V3r7De4Hh/8H/k0ob1ucj8MRR9hp9WjGY4HSo6ulza3V/2WIfzUd:V3rezHEgMx1WjGhdlzaYWIrq

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.5b53248d4764a6c8d117ed8c7855c6c0.exe

Files

NEAS.5b53248d4764a6c8d117ed8c7855c6c0.exe
.exe windows:4 windows x86

aa2361a1768af5a3026fb8eff6398ff1

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

WinExec
PssWalkMarkerFree
K32EnumProcessModulesEx
GetPrivateProfileSectionW
RaiseFailFastException
PackageFamilyNameFromId
GetSystemPreferredUILanguages
PeekConsoleInputA
RemoveVectoredExceptionHandler

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 51KB - Virtual size: 70KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE