NEAS[.]fb5fe0f4bb029ea671d7d32ec868f540[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.fb5fe0f4bb029ea671d7d32ec868f540.exe
Size

96KB
MD5

fb5fe0f4bb029ea671d7d32ec868f540
SHA1

b6a310edceceda08161111d0c2174aab15c83252
SHA256

3d345c77513a25a75f5dca5025b945c3529cafa1013b9ecb3938e6a46b13bc2f
SHA512

ac17032c6000c8679944759c058cdc48aaee1edd3b3b3d7d5f78ab312a1c80a78a4cd9efa190b754d77e4f49f3736c557ecdb86214a969464d7515f9ac1e6ccb
SSDEEP

1536:////xMKG64M+I2oVA23C6R9g/Vx4wIXyVEbItPvpjVrs2ryrd1vUQuqSuWnRrF4P:RMaH+IpVAsCJ/3RIXqEbYnHs2qmRlixH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.fb5fe0f4bb029ea671d7d32ec868f540.exe

Files

NEAS.fb5fe0f4bb029ea671d7d32ec868f540.exe
.exe windows:4 windows x86

ee8b1a38d136c0af220256fe5e200733

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

BeginUpdateResourceW
DnsHostnameToComputerNameA
BaseInitAppcompatCache
WriteConsoleOutputCharacterA
GlobalHandle
GetVolumeNameForVolumeMountPointA
ReadConsoleOutputA
EnumResourceTypesW
OpenDataFile

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.brdata
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE