NEAS[.]5d322b652f9dfac13740784615dea550[.]exe | Triage

Sharing

General

Target

NEAS.5d322b652f9dfac13740784615dea550.exe
Size

119KB
MD5

5d322b652f9dfac13740784615dea550
SHA1

bdf6e182455bbe09a81b8ec1e2e8b4493b9d1844
SHA256

584b5b16bb27781fbd6c5506e6853e6009fd6df7507dd1abfd8fdc89bde65439
SHA512

273642a39bd9ccb4bc5323f47f1c474fd9aab3089ba754ca1df9327267f824b03b07dc814b0e71f2d40fc2abb21d61582b4c3dbf84b365178623fe3ae507911a
SSDEEP

1536:c1T/gWD0R8jMg0awOiqgTziEC6zaGAtrHXOH+irOaTGL6EBmY8pt4/TBDFcfr4ZY:+/gQ0rgNi1zN9ABU+Ms4gvcT4vX0zGA

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.5d322b652f9dfac13740784615dea550.exe

Files

NEAS.5d322b652f9dfac13740784615dea550.exe
.exe windows:4 windows x86

e9c215560cbf8a95f3752371af7df7f9

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

FindActCtxSectionStringA
GetFileAttributesTransactedW
GetPrivateProfileStructW
QueryInformationJobObject
AllocateUserPhysicalPagesNuma
FatalAppExitW
CheckNameLegalDOS8Dot3A
GetSystemTimePreciseAsFileTime

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 105KB - Virtual size: 126KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE