NEAS[.]5c90661a343687e3143ee369e6f2a8e0[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.5c90661a343687e3143ee369e6f2a8e0.exe
Size

66KB
MD5

5c90661a343687e3143ee369e6f2a8e0
SHA1

18c1a823f5b005eb2f5d82facd33c28573d15a67
SHA256

b4bd3b574889a073ac6d81e4b77508ca4390c7ff5150cb62aba366458aea9bb1
SHA512

ac943dbccbd5528d77dd91b8a3e81bee2406d9b6cc35b31b32882fd9959096a8f7067628967c5cafd22c2b8f5dc67a342ca8e5af293e2ac49648b5d200a42e9f
SSDEEP

1536:uPCrIj8650EBmlOBAyWDFlpMiu9Nt+x+DqltdHhpdKtxlS2Imv23O/LSO9rEBNkd:ugIW0tOu0kxly+N/3cWyDr6XL

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.5c90661a343687e3143ee369e6f2a8e0.exe

Files

NEAS.5c90661a343687e3143ee369e6f2a8e0.exe
.exe windows:4 windows x86

8f425b7c13c0a3d52bc90246414cf12b

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SetTapeParameters
GetFileSize
ReOpenFile
ReadConsoleOutputAttribute
GetFileMUIInfo
OpenThread
RegQueryValueExW
RtlCaptureStackBackTrace
FlushProcessWriteBuffers
ReleaseSemaphore
GetVolumeInformationByHandleW

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 51KB - Virtual size: 70KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE