NEAS[.]c67455b4526f14bd771e703ccc257d30[.]exe | Triage

Sharing

General

Target

NEAS.c67455b4526f14bd771e703ccc257d30.exe
Size

119KB
MD5

c67455b4526f14bd771e703ccc257d30
SHA1

eea7d07eec44d2e2babffefd07278547891b29bc
SHA256

c6092a06c9605386fef85da640fc499f941d8673b1d61942cc918ea92c90c71d
SHA512

e55fe2ddbb59fda8ba653aa00df628abb046310dbab538e2901c70dab78864ea88dd4ebcf7e5c1ce95d093ac7a64b7357f67ea141d3190d44806fdd7d60c8dce
SSDEEP

3072:FezTvs8FlPjMID50G1cOJe6MjqSIuC3U6BcDgBq+p9:gs8FqID6Gyj6MjqSI5kkcDkq2

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.c67455b4526f14bd771e703ccc257d30.exe

Files

NEAS.c67455b4526f14bd771e703ccc257d30.exe
.exe windows:4 windows x86

20f28e0e4ba821b3db684fa42ed3c0a5

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

WriteProfileStringW
GetCompressedFileSizeTransactedW
GetComputerNameW
RegOpenKeyExW
EndUpdateResourceW
SetDefaultCommConfigA
GetNumaNodeProcessorMaskEx
RegLoadMUIStringW
GetNamedPipeClientProcessId

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 105KB - Virtual size: 126KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE