NEAS[.]c33da6a9785d438b8a21b89e23047200[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.c33da6a9785d438b8a21b89e23047200.exe
Size

66KB
MD5

c33da6a9785d438b8a21b89e23047200
SHA1

0bbb04d1afca801d5c9b3c4fcad3145e1024b53e
SHA256

ff2c926d7a05ac73f7669d6e287b6e06fe56771b85002b4cf6fd16c7229c5bdf
SHA512

5110191d3b7f86e7353858908c7fd2da1b839e0b363114748891fa0f643bb0987cca35eedf861d51ca2b92ff609781d38063cc547b2c15b231b2aaae11014552
SSDEEP

1536:OC59fSiCEQq/UTpGApOMkYwUNnr4IU5L3FxbQT2si/6z:/9aW5MkurS5BxbM2siu

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.c33da6a9785d438b8a21b89e23047200.exe

Files

NEAS.c33da6a9785d438b8a21b89e23047200.exe
.exe windows:4 windows x86

ca668e287b8c2c765090564ddbe0c0ef

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

MoveFileExW
SetHandleCount
WerRegisterAppLocalDump
QueryThreadProfiling
timeGetSystemTime
IsValidCalDateTime
UnregisterApplicationRestart
UnhandledExceptionFilter
WerUnregisterFileWorker
SetProcessInformation

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 51KB - Virtual size: 70KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE