NEAS[.]598a3f23ec823acadf65db3337433c40[.]exe | Triage

Sharing

General

Target

NEAS.598a3f23ec823acadf65db3337433c40.exe
Size

96KB
MD5

598a3f23ec823acadf65db3337433c40
SHA1

7a2004b518bff3c8664d202f566b6f72267ab1ce
SHA256

f124e03e5b7b20522837768801b3ca4381d099fa1be8d5557d116abd8433edc1
SHA512

6a5aa8c22b395166586b3bb34618aa3476baba9e69ecc892d8479373edd42110d321d4ddf7cdbfaa7b207df3790493e9c0a3ea22bd60322dc62da429f9987fa0
SSDEEP

1536:YGtHqeQ2nOLMXOjHzHIigz5FualzbMMeHQpAha7D6f1gMGpjVrs2ryrd1vUQuqSu:YeHq5COHzHTgz5FurMgA7DKIHs2qmRlW

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.598a3f23ec823acadf65db3337433c40.exe

Files

NEAS.598a3f23ec823acadf65db3337433c40.exe
.exe windows:4 windows x86

858534db5418676797a14b5784a84c76

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SetFileShortNameW
WritePrivateProfileSectionW
GetTapeStatus
SleepEx
GetCalendarInfoW
Heap32ListNext
IsBadHugeWritePtr
LCMapStringW
RegisterConsoleVDM
SearchPathA
HeapLock
GetConsoleInputExeNameA

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.brdata
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE