NEAS[.]914314c5c6034d3dfe111f226b350510[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.914314c5c6034d3dfe111f226b350510.exe
Size

119KB
MD5

914314c5c6034d3dfe111f226b350510
SHA1

6f89836a55527c96325a5c99404a8b3dea5af190
SHA256

53a33a3d63e1b46c96930b9d92a48548b9bf8ff7072dfdfaf3dd56d54f0ba893
SHA512

83fea1960d93119a8b39b9c78e52204291a3f1c50aa096b0c6db8e2146d67582dc2b88ef8cc11d51201c78528530abbc9800cdf0a3d4aa8e729054cb1c357a9a
SSDEEP

1536:UQwvc1t+gP4LHkmNc9sJ7HOjubS2jKvibM2lHd3O+mnDRPxrMS6irfnGzTT8ftUg:UQ9t+g2FGeZGqKvibdd+P9ZP6iDKfI

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.914314c5c6034d3dfe111f226b350510.exe

Files

NEAS.914314c5c6034d3dfe111f226b350510.exe
.exe windows:4 windows x86

2916815c716be8e03cd1751311e5f543

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

PssWalkMarkerSeekToBeginning
SetFileValidData
GetSystemDirectoryA
NlsWriteEtwEvent
K32EnumProcessModules
GetTimeFormatEx
EraseTape
WritePrivateProfileSectionA
EnumSystemGeoID
CloseThreadpoolTimer

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 105KB - Virtual size: 126KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE