NEAS[.]5bd81d46f837758fdb47beeb70187030[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.5bd81d46f837758fdb47beeb70187030.exe
Size

119KB
MD5

5bd81d46f837758fdb47beeb70187030
SHA1

5ed2ec7f054239066a9421f62d53329217069837
SHA256

a7b8b096fd8be7fe01d99fb782b2a2953eadd7a9c60d8d3db037103ef373771f
SHA512

7830b2a330533472a0dcfe2913370c2b0bfeb70ed6abf72a895697d8902118c58e84022f505bb6fb195e856fa06a3cc7c4c465cb4afe36d84984b07db0e963f5
SSDEEP

3072:5RjdTGtwZzG8HSZ7iEQDqr1u1En0dgXi+IMIN:5RjdT2cSJiErE1nwi+9W

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.5bd81d46f837758fdb47beeb70187030.exe

Files

NEAS.5bd81d46f837758fdb47beeb70187030.exe
.exe windows:4 windows x86

4cc5566587b7a62a7b20cf42fff8a241

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

FindResourceW
IsBadStringPtrA
SetWaitableTimer
IsValidCalDateTime
ActivateActCtx
DeleteCriticalSection
GetLocaleInfoEx
DeleteBoundaryDescriptor
LZOpenFileW
TermsrvSetValueKey
BaseUpdateAppcompatCache

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 105KB - Virtual size: 126KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE