NEAS[.]57057bb64380e7324a08a399d7050a50[.]exe | Triage

Sharing

General

Target

NEAS.57057bb64380e7324a08a399d7050a50.exe
Size

175KB
MD5

57057bb64380e7324a08a399d7050a50
SHA1

c1e3811382de065577130c9d43e41bbbdd7d1bcb
SHA256

ae98e01cefd885e65edcd55a9a5f30acfe91310e76c4ce7cc171e72dcf519585
SHA512

37731499e2159e8ba9afe36647a3cbf31b9b3c7d5a5c61610e35d2ce8b55c4e29e8734fcaec92c52bb453db78c6fdb0f5fe688774e4f0aa85d14ea3fa749559b
SSDEEP

3072:01wasG8EdHCL69wgMWOMXhIS75joWYV1LSpsvWofCFkwdzQP1q+Kjxs:/WNXhp758FV1LSpjrDuqHu

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.57057bb64380e7324a08a399d7050a50.exe

Files

NEAS.57057bb64380e7324a08a399d7050a50.exe
.exe windows:6 windows x86

3421d9c559ed3c941c2ebbbb7de313c3

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

msvcr120d

fputc
_time64
sprintf_s
vsprintf_s
_vscprintf
fopen_s
__crtUnhandledException
__crtTerminateProcess
fflush
exit
printf
memset
_cexit
_amsg_exit
__FrameUnwindFilter
fprintf
fopen
fclose
_crt_debugger_hook
memcpy

kernel32

GetSystemTimeAsFileTime
GetCurrentProcessId
QueryPerformanceCounter
Sleep
IsProcessorFeaturePresent
IsDebuggerPresent
GetCurrentThreadId

mscoree

_CorExeMain

Sections

.text
Size: 90KB - Virtual size: 90KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 74KB - Virtual size: 74KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 38KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ