NEAS[.]0c1898f629b3b2a433219226ab4adee0[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.0c1898f629b3b2a433219226ab4adee0.exe
Size

119KB
MD5

0c1898f629b3b2a433219226ab4adee0
SHA1

219724daeaa98caa6864c37ebbd7dea4d0d4e37c
SHA256

88cecf6cbf391f5a8d53eb57fea0fee731b28d2d53402cdefe07e24e8486ff3d
SHA512

0279cdc8090d64cd445e727b984d3b470d8a81fb525b1bb9c92e754a4241869a99fc80d6d39be7ee8f7f91e03974c1d5ed6d2da4d037b20f22ab20f0e6d246a3
SSDEEP

1536:LqixHyjvYBc2dfLo6r7q7OK0cf2S4oPl8Sz9ydh3y5Sp/rBgfpsrYg6W4CzpxmfR:cvSc2dE6r7ncfrmSzeBVgBUX6YxPmSZm

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.0c1898f629b3b2a433219226ab4adee0.exe

Files

NEAS.0c1898f629b3b2a433219226ab4adee0.exe
.exe windows:4 windows x86

94df7723a7b3e42c5e0a41c89b4f25ec

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateTimerQueue
QuirkIsEnabled2Worker
CmdBatNotification
SetConsoleCursorInfo
GetTempFileNameW
HeapCompact
HeapReAlloc
GetCalendarInfoEx
SetWaitableTimerEx
RegUnLoadKeyA
GetNumaNodeNumberFromHandle

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 105KB - Virtual size: 126KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE