NEAS[.]0dac5d6782b4c41474cedbe0e92e7860[.]exe | Triage

Sharing

General

Target

NEAS.0dac5d6782b4c41474cedbe0e92e7860.exe
Size

119KB
MD5

0dac5d6782b4c41474cedbe0e92e7860
SHA1

f2ed66b79530e557299e848aa947d2332056c701
SHA256

ed1b404a7944017abd56dff1b8d9306ceb1faae0dbf23f7699c9eb1945f17285
SHA512

1944509638fe3c1d99a922fb24982d70543e92dcf37a6abc7ff4abb9e206a66d5075f95e163eb3635cbfd61b59ff3298525f39d549e399e0a28ddf2439d1fc1b
SSDEEP

1536:kZdkwjbF/1WyQnmmK6G9doxyM7J/eeLP8pa+dwGThakYe3XyaRvGygHgvT6eYEQ8:U6K6OWQsGjFt7kgL6RvzIr8bY4537h7y

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.0dac5d6782b4c41474cedbe0e92e7860.exe

Files

NEAS.0dac5d6782b4c41474cedbe0e92e7860.exe
.exe windows:4 windows x86

8603ffda53d8f1e1d9abed8a4089dde8

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

MapUserPhysicalPages
SleepConditionVariableSRW
WriteProcessMemory
GetPrivateProfileStringA
GetExpandedNameW
GetCalendarMonthsInYear
EnumDateFormatsExEx
OpenPackageInfoByFullName
SetConsoleCP
SetLocalTime

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 105KB - Virtual size: 126KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE