NEAS[.]cd279cfbe9b3b54fded4802f4ed1c440[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.cd279cfbe9b3b54fded4802f4ed1c440.exe
Size

119KB
MD5

cd279cfbe9b3b54fded4802f4ed1c440
SHA1

62fefd075115951925fe3fd5d09c1a935dda9316
SHA256

4712e8593f80594d7fd550db347b28d3f9af36f7b0a5aa95d16b5878b0e5bc98
SHA512

586b4fd1173f4fc52d381836364450f47715fd92bcafb2283e83a7db5eb6ce700ed39848b24c3a723093bf7e8c14d4564e029dced589e610ef10c7801e6a0a65
SSDEEP

3072:qNao40IIOUUouxKvu7umo347dQwhmG7YSumw4rbciikT:LDUUouLi4xQLuuZxiT

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.cd279cfbe9b3b54fded4802f4ed1c440.exe

Files

NEAS.cd279cfbe9b3b54fded4802f4ed1c440.exe
.exe windows:4 windows x86

bd2dc1659e1925172375ea6f7c8d7f2d

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetDriveTypeW
WriteConsoleInputA
CheckForReadOnlyResource
GetACP
GetNamedPipeHandleStateW
BasepGetExeArchType
IsBadStringPtrA
ReplaceFileW
GetConsoleAliasA
GetSystemTimePreciseAsFileTime
BaseIsAppcompatInfrastructureDisabledWorker

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 105KB - Virtual size: 126KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE