NEAS[.]5ad576283ba9e9ba84ed16956a425790[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.5ad576283ba9e9ba84ed16956a425790.exe
Size

119KB
MD5

5ad576283ba9e9ba84ed16956a425790
SHA1

c7867e0904f1fe71bd4da271db91be30dda46668
SHA256

564123a6ec8e4c688b744cea3216dd1e2d7ecf2d0cb76ae1a6999369090c2336
SHA512

9e4badb8c5566c9253d0200629107f920190b318d00864b0bb68d1400d437535312961760381a0abb8c95c36a3b727365f401aaeeb87461da9bbea082f2ec356
SSDEEP

3072:a8joa7xjYYrBmEc+VNj92kIDTaU74DAw3OBYPw:bMyjNrS+VukoyD3syw

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.5ad576283ba9e9ba84ed16956a425790.exe

Files

NEAS.5ad576283ba9e9ba84ed16956a425790.exe
.exe windows:4 windows x86

b9103706f24315daae513fbca837a06c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

DuplicateConsoleHandle
EnumDateFormatsW
RegLoadKeyW
GetVolumeInformationW
PssWalkMarkerRewind
EnumResourceTypesExA
CreateNamedPipeA
ExitThread
HeapUnlock
IsThreadpoolTimerSet
GetConsoleInputWaitHandle

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 105KB - Virtual size: 126KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE