NEAS[.]005961d51197c31bae61d66d6a3d0120[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.005961d51197c31bae61d66d6a3d0120.exe
Size

320KB
MD5

005961d51197c31bae61d66d6a3d0120
SHA1

2f00a19f5e00ff3b45afafa69b06431e796a1ebd
SHA256

59d75851a9cde6e595ec809142e4e48ac7dc66770fcb6c1946e63649997f9eb3
SHA512

7560ceee5c10268d6f8fcc250fee1dc4931b0f50cb6a0461e4373b38b7c7b572777da1b341086f5d11715b9e23ee80eab2b9c1d3525b94f41878cec3f46a1c1c
SSDEEP

6144:Pd8foVWwHTvnARcH2RfS155ONNXBuWoJBO9OMbHLkAqF7Ief9UmM7/uT:fvAQ2EB0NxDIBuOFe7/uT

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.005961d51197c31bae61d66d6a3d0120.exe

Files

NEAS.005961d51197c31bae61d66d6a3d0120.exe
.exe windows:4 windows x86

65156a0d80545db23c877fdb0f4a7966

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetBinaryTypeW
GetPriorityClass
LZOpenFileA
WaitForSingleObjectEx
QueryDosDeviceA
WriteFileEx
EnterCriticalSection
HeapSetInformation
ReadConsoleOutputCharacterA
GetCommandLineW
FreeEnvironmentStringsW

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.brdata
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tc
Size: 244KB - Virtual size: 244KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE