NEAS[.]545d5ed96cb3bb3a7281471a2870ab40[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.545d5ed96cb3bb3a7281471a2870ab40.exe
Size

119KB
MD5

545d5ed96cb3bb3a7281471a2870ab40
SHA1

8d677f06ded0c3cfe91e3c518587d0fd3faa95c8
SHA256

976e965e3c266632a87b9d5b7401cbe5546841a345ac4624a9aa3e38e0e31c4e
SHA512

bda05f5b7ad9353d3cc5a5b0719e37555f6bfd4eb1603a600d38a97c0b53450f744b6a5079cc4f6bdcec81e41af8b52471ffba6d55c8ca4b39fe528d32fa963c
SSDEEP

3072:0ZSAti46AAoqkOJ962hWHrg+NXtrNvfbzPJYoeAtulZ:ubYlAzqkGkIWzZDJbsv

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.545d5ed96cb3bb3a7281471a2870ab40.exe

Files

NEAS.545d5ed96cb3bb3a7281471a2870ab40.exe
.exe windows:4 windows x86

4991aaec58bb0e0efdc02d069ee06ee1

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

NlsUpdateSystemLocale
ReadConsoleOutputCharacterW
FileTimeToLocalFileTime
BaseCheckAppcompatCache
GetProcessTimes
EnumResourceLanguagesExW
SetCommState
FileTimeToDosDateTime
WriteProfileStringA
EnumSystemGeoNames

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 105KB - Virtual size: 126KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE