NEAS[.]ac74be3087495c8528eeb2c74fbaa8c0[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.ac74be3087495c8528eeb2c74fbaa8c0.exe
Size

119KB
MD5

ac74be3087495c8528eeb2c74fbaa8c0
SHA1

287b6e758f68d60c16b1a2e25bca5de5abd1f648
SHA256

c1670ce4c2eb16f201e9cf0d03d6756c14c246875ccca400e5680aef6d5f99ba
SHA512

f71e9a18589c6d3946478e73fc3d85f9f273c2482d0948b341748a99be9a53ac2a00e1e396c3571a2b9ec57fcf625afad6e2b48a8c99d4aa68070815ede37631
SSDEEP

3072:O+GiIZbtrm3sjw034Cz6KMO+zS9Xu+4DDdb/Z:YjUBLO+zS9XulDD9Z

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.ac74be3087495c8528eeb2c74fbaa8c0.exe

Files

NEAS.ac74be3087495c8528eeb2c74fbaa8c0.exe
.exe windows:4 windows x86

01c9e4867acd328b11f75d95e1faa1ea

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

OpenSemaphoreA
GetProcessorSystemCycleTime
ConvertThreadToFiber
SetLocalTime
SetCachedSigningLevel
CreateDirectoryTransactedW
HeapCompact
GetConsoleCP
FormatApplicationUserModelId
EnumSystemCodePagesW

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 105KB - Virtual size: 126KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE