NEAS[.]365538c18eef0f8a5ed9bb20f2ddd4c0[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.365538c18eef0f8a5ed9bb20f2ddd4c0.exe
Size

119KB
MD5

365538c18eef0f8a5ed9bb20f2ddd4c0
SHA1

d4eb2a5015b47b6931110188e3225b1cef1ebe42
SHA256

c7ba9f7c02c60c53ec2ac4bc05a01f482dbbf25fc70ac42d87febd64a6ad2a74
SHA512

535efe5c0107035085b3e53da4c3a29e28d934e8c75d55dc285dd7bb32d439e2ccbe645b58435e69805cad8f30a045e5be75b1303adcbc0efa4dfa5d95b7a1e7
SSDEEP

3072:qsfxehc/IuKr72d6qNoGnHyCRLO7+d7JGcEkUUEI8VHrFqRcGw:FJem/lCK4qNo6S7k7J1Ek86cF

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.365538c18eef0f8a5ed9bb20f2ddd4c0.exe

Files

NEAS.365538c18eef0f8a5ed9bb20f2ddd4c0.exe
.exe windows:4 windows x86

67fc8308ef63d8608120bfe2caf36b65

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetCalendarDaysInMonth
ConvertNLSDayOfWeekToWin32DayOfWeek
GetNumaProcessorNode
GetFullPathNameTransactedA
GetTimeFormatAWorker
SetTimeZoneInformation
PulseEvent
TzSpecificLocalTimeToSystemTime
OpenState

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 105KB - Virtual size: 126KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE