NEAS[.]0c0f571c4fd693a706c3955cb6dfeb80[.]exe | Triage

Sharing

General

Target

NEAS.0c0f571c4fd693a706c3955cb6dfeb80.exe
Size

119KB
MD5

0c0f571c4fd693a706c3955cb6dfeb80
SHA1

cf9001775cc14fe2d6e8aa403199b1123c93c30c
SHA256

323b22730c2c7f4d287e85a3ab87809c75058911155562605b1dd28ddf153c97
SHA512

d4013de6776896e9968b727008dcdc2d107164d76b92e11d69791063c4234cd952c6884e49053a62b63a1f26893902c3a7c895881a87bd60f228a9bcbb59a79a
SSDEEP

3072:A+fHKCR3OcMa1DaBvtlKt/yjb8G82C8qICOPFIC7cz:qCR3Zh1DEbKt/yjb8G2GneC7cz

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.0c0f571c4fd693a706c3955cb6dfeb80.exe

Files

NEAS.0c0f571c4fd693a706c3955cb6dfeb80.exe
.exe windows:4 windows x86

c23600181cefb7a6d47bf3847f4f9fef

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SetSystemTimeAdjustment
K32GetModuleBaseNameW
HeapSummary
RegDeleteValueW
WritePrivateProfileStringW
GlobalGetAtomNameW
CreateWaitableTimerExW
SetupComm
DeleteTimerQueue
EnumerateLocalComputerNamesA

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 105KB - Virtual size: 126KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE