NEAS[.]65c5d51492bf3d1fbe52fbf441f86060[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.65c5d51492bf3d1fbe52fbf441f86060.exe
Size

66KB
MD5

65c5d51492bf3d1fbe52fbf441f86060
SHA1

879bf50cc289a1eab2bc089ab9752147709daede
SHA256

d9048d866c7dd2deca0849e6d5732e2acdc3ca538ab30d5c243c236e796bcdd9
SHA512

1baa526df7a2717d4da6b30d8224ce2a9dfe6ce618aafda71efc66cc920375d75e23c1925c11c2133d08856d7d5d31efd70548b8873a6043b3570b8f22e9b7eb
SSDEEP

1536:7074TDivgxN5SliBmGnNX0HdUYJY7D3uv3LgC:708avvltGNX09UYJfDP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.65c5d51492bf3d1fbe52fbf441f86060.exe

Files

NEAS.65c5d51492bf3d1fbe52fbf441f86060.exe
.exe windows:4 windows x86

19195e1f389d69a85afa732dbb25855f

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

WerSetFlagsWorker
RaiseInvalid16BitExeError
IsBadStringPtrA
BasepAppContainerEnvironmentExtension
InitializeContext
SetFileValidData
TlsFree
ReleaseActCtxWorker
PssWalkSnapshot
EnumResourceNamesExA

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 51KB - Virtual size: 70KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE