NEAS[.]056bdd563d969bc5d96511e9660d9390[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.056bdd563d969bc5d96511e9660d9390.exe
Size

320KB
MD5

056bdd563d969bc5d96511e9660d9390
SHA1

4f97bd83ec28bbea4b7fe20e204488777f9b6c55
SHA256

8c2a3f08650271b44236ec513c04a743b8fbbe7a7775ec890bbcc49fed1c81af
SHA512

099567490e82da66fe1ed923b6103b847d53569a96bf6b4da87a96e7326832f812174150729165bb7b75d8a86a36e9552520bf4f47016de6b76147963f075eaf
SSDEEP

6144:3e25lFZH2RfS155ONNXBuWoJBO9OMbHLkAqF7Ief9UmM7/uT:3e2/v2EB0NxDIBuOFe7/uT

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.056bdd563d969bc5d96511e9660d9390.exe

Files

NEAS.056bdd563d969bc5d96511e9660d9390.exe
.exe windows:4 windows x86

1365e1a1ac9c72fa00e176d2359a95d5

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LZCloseFile
lstrcatA
BaseInitAppcompatCache
VirtualUnlock
SetErrorMode
SetConsoleCP
SetConsoleNlsMode
CreateIoCompletionPort
LocalFlags
GetComputerNameW
GetCurrencyFormatA
FoldStringA

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.brdata
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tc
Size: 244KB - Virtual size: 244KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE