NEAS[.]5721837330357052ddf91bd91b21eb10[.]exe | Triage

Sharing

General

Target

NEAS.5721837330357052ddf91bd91b21eb10.exe
Size

119KB
MD5

5721837330357052ddf91bd91b21eb10
SHA1

3f415c84707f3914cf204f9aa52b126b8dc3b71d
SHA256

45c265e69e391fdff44a6864945931b430558b2ac9101beb0d2fce68af883b6e
SHA512

fabebacde3ab759c337433d55390aac4374135a39b5fdd1824429c341bec9fb0ad9b7fbbc727d5a3d1b76cc54e0e55836b3bc17aa945095df3204d92585c7a94
SSDEEP

3072:Tuqpxn7735F6W2fAx34VD9wBsqkBBELCeKqs1bz4tJ04JLUru:TJv9Fb2pS3KqAAJDdD

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.5721837330357052ddf91bd91b21eb10.exe

Files

NEAS.5721837330357052ddf91bd91b21eb10.exe
.exe windows:4 windows x86

39ba6d7be1a1e424f9908ab1e6d51c94

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

EndUpdateResourceW
GetSystemTimePreciseAsFileTime
LocalCompact
SetThreadpoolWaitEx
GetStartupInfoA
CreateMutexA
FreeMemoryJobObject
GetModuleHandleW
GetShortPathNameA
WerRegisterAppLocalDump

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 105KB - Virtual size: 126KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE