NEAS[.]fca32fe00a2cf30c8cbc4ef784435d50[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.fca32fe00a2cf30c8cbc4ef784435d50.exe
Size

119KB
MD5

fca32fe00a2cf30c8cbc4ef784435d50
SHA1

5a2a7e200efdd0aec0428ed2ac40f1d77e3ce64c
SHA256

14ef1c23eba8a0e45e8f3aa29ef846b37aeb9ebc0c8a15726dc2594a962ce428
SHA512

885880f4c4786ca460a620ea106a1e0f5b1026a01ab9e0ef05324581e7f989e30e175a473046203fcef192020b55a8c9bda20037087f0217b5a11e5d4effc13f
SSDEEP

1536:vosTc1mGJIy/xvuWIvrWHELXGA7T/MvZsmhl0gbblLg1lflK46ICy/aDQGDZN9M8:vE7IytUTv7rnmECotd/SBDZNG1YdTX9f

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.fca32fe00a2cf30c8cbc4ef784435d50.exe

Files

NEAS.fca32fe00a2cf30c8cbc4ef784435d50.exe
.exe windows:4 windows x86

1344690e0b5059970b42fb14e5cdd86d

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

AllocConsole
GetApplicationRecoveryCallbackWorker
GetCommProperties
GetCalendarSupportedDateRange
NormalizeString
OpenPrivateNamespaceW
RegLoadMUIStringW
GetConsoleNlsMode
GetModuleHandleExA
CancelIoEx

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 105KB - Virtual size: 126KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE