NEAS[.]5c9956eb512cee2bf77fe9ca57a820f0[.]exe | Triage

Sharing

General

Target

NEAS.5c9956eb512cee2bf77fe9ca57a820f0.exe
Size

119KB
MD5

5c9956eb512cee2bf77fe9ca57a820f0
SHA1

b746334335bc452140988aae0e8abf12b386d096
SHA256

23c7dc668423ff73d1df88b9f505394e87d3fb665d9303ab2c0e54b226f32f56
SHA512

a086c9980a6d30c80d3ae6ef634d6060ac7ae3fb4d95135220963128e42f516d8a17d5ef821d4160aee29a67c12609af634c645ad97284e2987e6b54bff62170
SSDEEP

3072:dmw4D3B7DRhMUiv1okDI789ZwUGdlX6TaiP7:x4DxthMvtc7Jv6pP7

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.5c9956eb512cee2bf77fe9ca57a820f0.exe

Files

NEAS.5c9956eb512cee2bf77fe9ca57a820f0.exe
.exe windows:4 windows x86

2336d2ad9080e26232c9b999eee548b5

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

AddAtomW
AllocateUserPhysicalPagesNuma
FindNextStreamW
FindFirstStreamW
InterlockedIncrement
GetProcessIdOfThread
GlobalAddAtomExA
timeGetSystemTime
MoveFileExW
SetFileAttributesA
GetConsoleKeyboardLayoutNameA

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 105KB - Virtual size: 126KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE