NEAS[.]5cdb301d0f8be8c516817c147e792a90[.]exe | Triage

Sharing

General

Target

NEAS.5cdb301d0f8be8c516817c147e792a90.exe
Size

119KB
MD5

5cdb301d0f8be8c516817c147e792a90
SHA1

d24c693bb6d7b6c76549210adb276ef9543a273c
SHA256

82341c9feb25aa0d36b7fe9af56d8e61aaaf1cf0e019e7c28a396987283ce6a9
SHA512

6c8b001d943b762f1344d3c413f81baff678310e6b48125911dca2e4d00ebea18341f57db8093aee4340ed5511e6a2f74096b5714e867701b094255f8e8c75d0
SSDEEP

3072:6Zn/3Hyhcqit0eDaux+H5jLv1nZ0Rkf1lb+m4:iS+tZOwiLj11lg

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.5cdb301d0f8be8c516817c147e792a90.exe

Files

NEAS.5cdb301d0f8be8c516817c147e792a90.exe
.exe windows:4 windows x86

02d2e04a74c016afc8e86471faac34a1

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateThreadpool
SortGetHandle
EnumTimeFormatsW
VerifyConsoleIoHandle
GetConsoleAliasA
GetCommTimeouts
FileTimeToSystemTime
GetLocaleInfoEx
Process32Next
SetupComm
GetTapePosition
TryAcquireSRWLockExclusive

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 105KB - Virtual size: 126KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE