NEAS[.]d47cc4c56ce546da2684cddd528d87b0[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.d47cc4c56ce546da2684cddd528d87b0.exe
Size

66KB
MD5

d47cc4c56ce546da2684cddd528d87b0
SHA1

45870689164f06ca0e806ea1cebefa23ddf28177
SHA256

b94f1d154be7790ae2e11e6972a8029b13d07695f0b76ba2a907feaee56248fc
SHA512

a40c16a8f4c8decd58c3ec4e994a9a7619ec5678b96106ffc0c470eaab6807fbbc78233d9ba6836644d4da969716e129b543878ab4bfa5735d065cec50a93059
SSDEEP

1536:syRC3nfzKP1bMFyukoonApu48aEEui0OvOwG6/pQv:s++fuKF3kfIrf+vOOwBWv

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.d47cc4c56ce546da2684cddd528d87b0.exe

Files

NEAS.d47cc4c56ce546da2684cddd528d87b0.exe
.exe windows:4 windows x86

96856041651d121346d12e7b85a5a0eb

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

QueryThreadProfiling
ReplaceFile
OpenStateExplicit
GetConsoleInputWaitHandle
GetLocaleInfoA
GetStateFolder
GetPrivateProfileStringW
SetProcessWorkingSetSizeEx
BaseFreeAppCompatDataForProcessWorker

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 51KB - Virtual size: 70KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE