NEAS[.]5c9ba80259ace0f579fc37f2f9c2d240[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.5c9ba80259ace0f579fc37f2f9c2d240.exe
Size

66KB
MD5

5c9ba80259ace0f579fc37f2f9c2d240
SHA1

60d2d0c3d9bc82af396ef2c208fb36eb58e4370f
SHA256

eee5c79891c6f808c1d0715b52227c158ae786e2dc3236e91bf1051b2bc1b324
SHA512

fe5d9fd5f31da3490a97289868b177890a26a3f2db7d8817c862e4d677947f5e6a7b3decc48acc276316bbc36a37664ab55b1023815189e6543731a010687843
SSDEEP

1536:zNQpSGVH7swjpPBmSp8gBTm+GCMi082chG+zaWHqt:vYMetTmtCMi082CG+TO

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.5c9ba80259ace0f579fc37f2f9c2d240.exe

Files

NEAS.5c9ba80259ace0f579fc37f2f9c2d240.exe
.exe windows:4 windows x86

588642adcbe433cbb58992677e7df76d

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

NotifyUILanguageChange
UnregisterWaitEx
lstrcpyA
SetCalendarInfoA
SetThreadPriority
GetTimeFormatA
GetConsoleFontInfo
WerUnregisterAppLocalDump
BasepGetAppCompatData
IsProcessorFeaturePresent

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 51KB - Virtual size: 70KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE