NEAS[.]0ac5710c3a159615bed4504d3011b410[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.0ac5710c3a159615bed4504d3011b410.exe
Size

119KB
MD5

0ac5710c3a159615bed4504d3011b410
SHA1

e74c6f10eddf8cdffaaf511fee70ea201013d4c5
SHA256

e2cd97bc1ebf3dde2566f78d7b6429437afed61b4e63e22b168b34a3e6c683b1
SHA512

0060bb96062dee501b3127c21b27718d705bac3094845f32ada3e1b98033e11783be4d40c182c7287682f8f8647aa9b775664a82320dc9a0e3442c8803419a6b
SSDEEP

3072:tJ/dkcQ3H1PYEc2S3MjMwAJ+U9XC38aSZfcFu4lBqCPB0EGeiewQmGf3:tJ/+cQ3qvMAdfdo1PXGz5q3

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.0ac5710c3a159615bed4504d3011b410.exe

Files

NEAS.0ac5710c3a159615bed4504d3011b410.exe
.exe windows:4 windows x86

3b1cb7968ff06b60a280cea020e9f259

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateHardLinkTransactedW
DeactivateActCtxWorker
GetComputerNameA
GetQueuedCompletionStatus
_lwrite
FindNextFileNameW
GetFileAttributesTransactedW
SetNamedPipeHandleState
GetLogicalDriveStringsA
GetCommMask

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 105KB - Virtual size: 126KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE