NEAS[.]5a9108b133d89e9d73254e8f16a651d0[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.5a9108b133d89e9d73254e8f16a651d0.exe
Size

119KB
MD5

5a9108b133d89e9d73254e8f16a651d0
SHA1

614ac4b268d07b00a2b45cdeb376295b6938990a
SHA256

790a9c44eb1b1558ea1167a0c0344bc06beeb9efe840b0b7d4f3883d12c42d08
SHA512

1ecba53b82affa1d85f1db5eb739d25c7cdc046164150596761cb827817de8264cd6b3729a4b03237483b15e0869fd7e81450cba8617505afcc038d5eeefe7a2
SSDEEP

3072:/fgAm8sCM3T1nAbaf04XCJ0A0vnJjYfhmr2:/ZmH3T1n/yYnJEfsr2

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.5a9108b133d89e9d73254e8f16a651d0.exe

Files

NEAS.5a9108b133d89e9d73254e8f16a651d0.exe
.exe windows:4 windows x86

bbc368c1c3716c4724bd39951ffcb596

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

DosDateTimeToFileTime
GetConsoleInputExeNameA
PeekConsoleInputW
TermsrvRestoreKey
InterlockedPopEntrySList
GetMemoryErrorHandlingCapabilities
HeapSetInformation
GetModuleHandleW
VirtualAlloc
K32GetDeviceDriverFileNameA

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 105KB - Virtual size: 126KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE