NEAS[.]57ccfb32c6bf9cc6cb0ec8f31f5e7740[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.57ccfb32c6bf9cc6cb0ec8f31f5e7740.exe
Size

119KB
MD5

57ccfb32c6bf9cc6cb0ec8f31f5e7740
SHA1

d39ac24037c7c77f9fcfe908cb6a4c810cef8c4f
SHA256

9e071450ffd43779c5c17c8f2135c01d801ef72814337d59d17744779cce8f52
SHA512

511c9f5dad7e511f4148f51676d35a7bddb6a62b6ce9d154c93291e99f39a05c792db6c9373180d9137bbb59cf855035595b54d4f9e876e6a8157bc0aae9c807
SSDEEP

3072:8LTa4kuPW2qiq4HREpbnAW18zwrLsJ1vUzYaXEgPt65Pqk:ua4kp2XEhnAJzDcYa0gqqk

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.57ccfb32c6bf9cc6cb0ec8f31f5e7740.exe

Files

NEAS.57ccfb32c6bf9cc6cb0ec8f31f5e7740.exe
.exe windows:4 windows x86

dc84c1afdded2dce42d1b84d674055ad

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

RegDeleteValueA
EnumTimeFormatsA
GetConsoleScreenBufferInfoEx
LocalSize
lstrcpyA
FindNLSString
IsProcessorFeaturePresent
SetNamedPipeAttribute
GetFullPathNameA
BasepNotifyLoadStringResource

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 105KB - Virtual size: 126KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE