NEAS[.]0bb529cc6fc0c2aafef9ffdca6f2c730[.]exe | Triage

Sharing

General

Target

NEAS.0bb529cc6fc0c2aafef9ffdca6f2c730.exe
Size

119KB
MD5

0bb529cc6fc0c2aafef9ffdca6f2c730
SHA1

fa5e8f0cbf5b3c37b0d3a5010329baa8ca498ee8
SHA256

fc1d4739bf8a6c4b07555264ff4ef888fa6ecc1718202f01e2a4218c4059e9a3
SHA512

7d3b15215af016b2610f7c0da0fa75859400da6dc035837ba91c13b57369c0e3968d4f1dcf672da2c9521356af4eacbaed591c964b92bb3d32ac6d5b0a6c4fa5
SSDEEP

3072:FVUPNU/UdH40lolt8E5e7IJOOOBqIgVXJePJj9:FVUPgUJloluEYDrHgVIPR9

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.0bb529cc6fc0c2aafef9ffdca6f2c730.exe

Files

NEAS.0bb529cc6fc0c2aafef9ffdca6f2c730.exe
.exe windows:4 windows x86

d0c9980b0d8094c4663b819cca0cab63

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

TrySubmitThreadpoolCallback
SetThreadpoolWait
GetApplicationUserModelId
IsCalendarLeapMonth
GetShortPathNameW
GetConsoleFontSize
SetDllDirectoryA
LZCopy
DeleteFileW
ReadConsoleInputW
SetLocalTime

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 105KB - Virtual size: 126KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE