NEAS[.]bd61caecd07dc2f7f01f8c300cc2d950[.]exe | Triage

Sharing

General

Target

NEAS.bd61caecd07dc2f7f01f8c300cc2d950.exe
Size

62KB
MD5

bd61caecd07dc2f7f01f8c300cc2d950
SHA1

26cc7768883c9d5b9255acdfc96877598c61d700
SHA256

203607ab406122309a15e5030a760a940481c499410e051b34a17a13cf79f4c8
SHA512

3be41a1aa0a9b1ce4b1c7c377df1ea61eeced9b312d18fce7f5603e0abb7ba7a2b04e5202942a62877d4cfaa8e69869dbac8a73948b5bb317441df04285c7749
SSDEEP

1536:CfE5CscPP7rRztz+wTQ5KTDIkRTjku5PIOQEJ7:ME5CsOPvDnQsTDIkRTj5xIOQG7

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.bd61caecd07dc2f7f01f8c300cc2d950.exe

Files

NEAS.bd61caecd07dc2f7f01f8c300cc2d950.exe
.exe windows:4 windows x86

b65277ce5cd49d00dae52d61ddd18163

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetConsoleCharType
SetFileShortNameW
OutputDebugStringW
SetFileTime
GetNumaProcessorNode
VirtualFreeEx
WriteConsoleOutputCharacterA
WritePrivateProfileSectionW
ReadConsoleOutputW
GetFileType

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 47KB - Virtual size: 66KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE