NEAS[.]056c83cc8414620d14c945b93603c150[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.056c83cc8414620d14c945b93603c150.exe
Size

119KB
MD5

056c83cc8414620d14c945b93603c150
SHA1

62669268789dfc41d8a3330a54be6f1c6f896133
SHA256

18310acaed6fee6b843baac91306bd78ca7b9723dd9e4667af8de7868dfc6b89
SHA512

ba8ee76a0bddefb7e3863b3cbdc6477096ef8b16cc3151391aa3fcc0e59ee972498d2e9426c652c57f82740a6c69b25c4a7ffd2cce54195b3ead1497db63b17a
SSDEEP

3072:zvycJ669bxN30Z5U4HeNZe3B6cX4WClimmBSZs4nUJSzRrn:zqcJ6KEHUPNw+FQpD0B

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.056c83cc8414620d14c945b93603c150.exe

Files

NEAS.056c83cc8414620d14c945b93603c150.exe
.exe windows:4 windows x86

0f45a92d421bedac28dc8bf94d1b7314

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateRemoteThreadEx
IsCalendarLeapYear
CreateBoundaryDescriptorW
WinExec
PssWalkSnapshot
GetCurrentPackageFullName
ReadConsoleA
RegQueryValueExW
FileTimeToDosDateTime
CreateDirectoryExW
GetSystemDEPPolicy

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 105KB - Virtual size: 126KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE