NEAS[.]c0f93c4183d15dff2d71f72a38c34170[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.c0f93c4183d15dff2d71f72a38c34170.exe
Size

119KB
MD5

c0f93c4183d15dff2d71f72a38c34170
SHA1

4c7b2c56ee5683bbcbe3546d56991d49ce256a31
SHA256

795947817cc2b897f5cad38c60e92e04f180c91ebb8910ae0bf30efc7a7c5ca4
SHA512

bd3c056d82ae17d76ac297db020e27a651d492d29e6a7aad681cf5e22ef5f90bc29a5cf43cb07c310addad59f502851e0e245a22b687d83c1efddd81cd4cda3e
SSDEEP

3072:/Ul+pLJpM/OHi981Hfg0J/7FDHtwgsTT+o58B5MGPwjdZz:/X5zHi981Hfz7FhqTZ8B7g

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.c0f93c4183d15dff2d71f72a38c34170.exe

Files

NEAS.c0f93c4183d15dff2d71f72a38c34170.exe
.exe windows:4 windows x86

ecff05572129127417ef41c3417b13e7

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SetThreadToken
MoveFileExW
GetEnvironmentVariableA
GetApplicationRecoveryCallbackWorker
GetStringTypeW
EnumTimeFormatsA
GetFileBandwidthReservation
RaiseFailFastException
TryEnterCriticalSection
WerGetFlags

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 105KB - Virtual size: 126KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE