NEAS[.]ca0f3171a71d07c4b020538b368bf9f0[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.ca0f3171a71d07c4b020538b368bf9f0.exe
Size

320KB
MD5

ca0f3171a71d07c4b020538b368bf9f0
SHA1

44c5496a86026813585020d69cabd7a962169c2f
SHA256

1c1f2ad4a21ecee7dd3130a3a30add7dc8047bfdf20b65ec4319ce8942dc90f7
SHA512

e0d7577c01febf888999e4a466252e2d0d6ebcbf48ed901f596ba5d3b44d08960e4959bfa1b7d349125321a0fa15c0ce5e039c2e3badc5c531b795abbccdd928
SSDEEP

6144:GOrVglFy4jPgQH2RfS155ONNXBuWoJBO9OMbHLkAqF7Ief9UmM7/uT:GmybYW2EB0NxDIBuOFe7/uT

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.ca0f3171a71d07c4b020538b368bf9f0.exe

Files

NEAS.ca0f3171a71d07c4b020538b368bf9f0.exe
.exe windows:4 windows x86

16cd4bee4444a8a02e76c242cb635fda

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetDiskFreeSpaceExW
SetHandleCount
SetVolumeLabelA
LZClose
ScrollConsoleScreenBufferW
SetConsoleTitleA
TlsFree
FindAtomW
GetFileTime
GlobalFindAtomA
BeginUpdateResourceA
CompareStringW

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.brdata
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tc
Size: 244KB - Virtual size: 244KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE