NEAS[.]5ef8a03c9bcbd9de720fbc1b85031fc0[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.5ef8a03c9bcbd9de720fbc1b85031fc0.exe
Size

66KB
MD5

5ef8a03c9bcbd9de720fbc1b85031fc0
SHA1

5d86c9901c04fd2e584ca24431231164f7374e5d
SHA256

dc152bd78d12e3b4319cd25ba91b393c7d8783cb9de0a748ebf5daf34fa7850b
SHA512

e7c72886ba44a25e06f6360dcbac74c268c0624957e10bb93ccdb24d25f71842ae9bf6392891deedad6ba6791ba1cfdab3e9b76fe836b34bd669348f675a1a1a
SSDEEP

1536:21ph7hh+0Bu6oV3zQjwipJZ4ECipOEaGNDO8:4p5TG68sUOPhCikuO8

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.5ef8a03c9bcbd9de720fbc1b85031fc0.exe

Files

NEAS.5ef8a03c9bcbd9de720fbc1b85031fc0.exe
.exe windows:4 windows x86

1eae5bc08f5e92fb987f8bd700b60bb7

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetConsoleAliasesLengthW
HeapSetInformation
CreateThreadpoolWork
GetAtomNameA
UpdateResourceW
GetThreadErrorMode
TermsrvSetValueKey
MoveFileExW
FindResourceA
ReleaseSemaphore
NotifyMountMgr

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 51KB - Virtual size: 70KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE