NEAS[.]575efb71baddfc7d1d2794ebb38d1b00[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.575efb71baddfc7d1d2794ebb38d1b00.exe
Size

119KB
MD5

575efb71baddfc7d1d2794ebb38d1b00
SHA1

5e6d6f70b5dc92d6557179f5fe2fed715df4839b
SHA256

b06fccac85f30807bad6ac4fae7e725fb633bf939fa4f9c8234221913557717d
SHA512

7cf0e535d130ce7a019bc291c297bf0586c015943e9dc1440f0adae82b16a852d38fd2b7bcc36e665af7217e63599d6e5b57ec3e1dd040a2f555a2d7046fa002
SSDEEP

3072:eYdok2l2mdDWQb7yNveGiUUeunaPcdGq5be8n+TTLj:Fdw2Qb7KeGiUUeu3b7n+TPj

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.575efb71baddfc7d1d2794ebb38d1b00.exe

Files

NEAS.575efb71baddfc7d1d2794ebb38d1b00.exe
.exe windows:4 windows x86

4abf2817fe52c09389a33329b4cf0c22

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetNLSVersionEx
EnumSystemCodePagesW
OpenFileMappingA
ResolveDelayLoadedAPI
SetThreadpoolThreadMaximum
GetDurationFormatEx
CreateMutexW
SetConsoleOutputCP
FindFirstFileA
IsWow64Process
lstrlenA

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 105KB - Virtual size: 126KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE