NEAS[.]5f159f3549e033700d688b9516cd5060[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.5f159f3549e033700d688b9516cd5060.exe
Size

119KB
MD5

5f159f3549e033700d688b9516cd5060
SHA1

2b3cd0cbea45480751a00b5c252c4827bf9e7196
SHA256

f70e13b019906043804cfccaddc83f0bc29662872ebaaae2dc9ac91e692e23fc
SHA512

2f920b6fb04d897e953e26c3d45d5dd0afc3ff3290e53845b9807d4260d2d0213e86482649729adbae5301057dbfb20baacf4c84bfc813f7a0e3d3932fb087d9
SSDEEP

3072:w6lJ0KGQvv3C4DJRKp1GRQDnPawEIxL5/wmEdrfcoGUY4wJa:wy0KG2y4+az0VFEdrcoGn0

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.5f159f3549e033700d688b9516cd5060.exe

Files

NEAS.5f159f3549e033700d688b9516cd5060.exe
.exe windows:4 windows x86

235beaf742a9e5da1b8e9231a9512d2d

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateSocketHandle
CreateThreadpool
GetModuleHandleExW
SetConsoleCursorInfo
QueryActCtxWWorker
ReadConsoleOutputCharacterA
SetEnvironmentStringsA
CompareCalendarDates
SetEnvironmentStringsA
GetConsoleCommandHistoryLengthW

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 105KB - Virtual size: 126KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE