NEAS[.]19e54846854b54887516f01258bf5f10[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.19e54846854b54887516f01258bf5f10.exe
Size

119KB
MD5

19e54846854b54887516f01258bf5f10
SHA1

65750aef00e569bf3ff73fdeea6ae22c8413a4f3
SHA256

8ded4b81ec146f72627a8986fa21377cefd925e448360c2711830f913c1bb9b2
SHA512

c3ed2ce4db55df0a804174247c33bdbc488feba5e5b4d13867e6ab32aba9ed51307cf7822368371e7dbf3c63e9d8a1cedf4487d95538860b1800406dc68d9b87
SSDEEP

3072:HIhKXOUjdyJbCjJzYXeA+/1gVwHhTQlYDJzot4LW:H0KVUCjRYfI5TQlYDy4C

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.19e54846854b54887516f01258bf5f10.exe

Files

NEAS.19e54846854b54887516f01258bf5f10.exe
.exe windows:4 windows x86

c2fec601b2af0be493a90ce77118fcd6

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

OpenSemaphoreW
GetDateFormatW
GlobalAddAtomExA
SetHandleInformation
PeekConsoleInputW
GetConsoleKeyboardLayoutNameW
GetNLSVersion
FreeLibrary
RtlMoveMemory
lstrcpynA
InitOnceBeginInitialize

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 105KB - Virtual size: 126KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE