NEAS[.]d5dc1dd29f38a43ea03fba48ce142790[.]exe | Triage

Sharing

General

Target

NEAS.d5dc1dd29f38a43ea03fba48ce142790.exe
Size

66KB
MD5

d5dc1dd29f38a43ea03fba48ce142790
SHA1

fd7d6ddbc2a22343e2b6cb0deb489bf05687cfd0
SHA256

125ecc467f2d8ba24c7998193fd6f39fa1346ab9be0f742cb4326316741142ac
SHA512

162e5eec586a3b577933a1dd4594d1abecf79efa8346153f8d6b4254060864192f1ed7fe0e8aeacec67e35a33c8dd004d34bf244bbbbb4956f476f3606195dc5
SSDEEP

1536:2drzIesdTtc1QJoSFTajRpNKH/F7W50dniOaRC2kiJhUGuwwK:2drEtc1QfFT4NyF6+i5C2h0Guk

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.d5dc1dd29f38a43ea03fba48ce142790.exe

Files

NEAS.d5dc1dd29f38a43ea03fba48ce142790.exe
.exe windows:4 windows x86

b38daea82b0c0f43d9ece3c983854406

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

WriteConsoleOutputCharacterA
AddAtomA
DnsHostnameToComputerNameA
CreateFileA
SetThreadToken
LockFile
GetThreadLocale
PeekConsoleInputA
BasepReportFault
SetInformationJobObject
HeapReAlloc

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 51KB - Virtual size: 70KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE