NEAS[.]cf5a63adfb75e66d0024dec3d3a9f6d0[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.cf5a63adfb75e66d0024dec3d3a9f6d0.exe
Size

66KB
MD5

cf5a63adfb75e66d0024dec3d3a9f6d0
SHA1

58b025c34c93db9992f7e61d90a97485bb9727a0
SHA256

1dd794f90504665b2f35eb638b37a0055497f363690ee7f87816b12cd3d337fe
SHA512

6cafca35e13f9f55a6916b4e4c85c1cb4f7728dfe6414f65631f11ab24889c483f0f0e697ecc53f20fd67791799dcee4bab3d2452a9a0d321379216eb7f5e974
SSDEEP

1536:YdddNiK3k8VXuvPeiCvj4DKdFbZkwN5xOnGkmk5WX9U7:sdamk8kOzYKdZF9R9I

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.cf5a63adfb75e66d0024dec3d3a9f6d0.exe

Files

NEAS.cf5a63adfb75e66d0024dec3d3a9f6d0.exe
.exe windows:4 windows x86

5f7b086cfa9ae84f203a358147f9e4b3

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SetConsoleCursorPosition
EnumSystemLanguageGroupsA
BindIoCompletionCallback
WaitNamedPipeW
RegDeleteKeyExA
RemoveDirectoryW
GetProcessIoCounters
RegisterWowBaseHandlers
GetProfileIntA
TzSpecificLocalTimeToSystemTimeEx

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 51KB - Virtual size: 70KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE