NEAS[.]505d95b2631feecee7c33bcd02e415a0[.]exe | Triage

Sharing

General

Target

NEAS.505d95b2631feecee7c33bcd02e415a0.exe
Size

119KB
MD5

505d95b2631feecee7c33bcd02e415a0
SHA1

fecda142134db51d2ede9c9be0f0f6648515071b
SHA256

303a535019df334895e52688b5fad86b12b2a47cb46161aec1f3c7d52f793e79
SHA512

710de8619085a7c35483ea66221489f931a54398146835be996cd305705dd21a2577a43682b3941ff354469c0d87e8b01fd969220ae3c0df98cbf6d8eb49f1bc
SSDEEP

3072:GPy1hgK1z31oWLmqvLEDzqrj8JB+IfBtvd1BHB:vaQ1oWLm2LED+v8PfBpd1BHB

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.505d95b2631feecee7c33bcd02e415a0.exe

Files

NEAS.505d95b2631feecee7c33bcd02e415a0.exe
.exe windows:4 windows x86

e0860f87d5aa817f6c78024326598473

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetVolumePathNamesForVolumeNameW
BasepCheckWebBladeHashes
DisconnectNamedPipe
GlobalAddAtomExA
BaseCheckAppcompatCacheWorker
SetHandleCount
ClearCommError
GetProfileStringA
RegGetValueA
SystemTimeToTzSpecificLocalTime

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 105KB - Virtual size: 126KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE