NEAS[.]501c4602ebbc692c0c4f142d0d3ea470[.]exe | Triage

Sharing

General

Target

NEAS.501c4602ebbc692c0c4f142d0d3ea470.exe
Size

119KB
MD5

501c4602ebbc692c0c4f142d0d3ea470
SHA1

014f7e1e4dc86b39ac01e50bc20ae3f68a86aba7
SHA256

267b77713f63943c6de20b3c67a92ea50952951b73f620f968ff6559969adca9
SHA512

424491922badac4d2e7faede923dd96e7fd89e8753602bc3bcfac365bc5ce939c7990be3bf95c39a75354c2c412b04f41af3e641706c9e36188edb9e251d633c
SSDEEP

3072:0edYbvTCLQ7zZ5sMr1zTbnG+oTn9MksEO6oOiY+3dhHrMJm:HYzTCE7FZXmGk2++thHAg

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.501c4602ebbc692c0c4f142d0d3ea470.exe

Files

NEAS.501c4602ebbc692c0c4f142d0d3ea470.exe
.exe windows:4 windows x86

9e06aaff12e62e610c1b57a1bc94e0a5

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SystemTimeToTzSpecificLocalTime
SetFirmwareEnvironmentVariableW
CloseThreadpoolIo
ReadConsoleOutputA
SetCalendarInfoA
GetExpandedNameA
HeapAlloc
GetFileAttributesExW
CopyFileA
DeleteAtom
lstrcpy

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 105KB - Virtual size: 126KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE