NEAS[.]2a5c531422922978fc4ad74758991230[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.2a5c531422922978fc4ad74758991230.exe
Size

119KB
MD5

2a5c531422922978fc4ad74758991230
SHA1

5f057bd93d15f52abfbe9e3feab0c6b95101c32d
SHA256

e3c088e6bb25f84ad6319ed2a018a16a0e43d4f2424538e7b53fa18627758766
SHA512

cee02c714d4cee081d9a0320d0b04db9f934c0e52afeac82302aa4bce30c838e2beb6b9b49eb5bc6eca38cd99db31a34aa874fd82d5d69413fda14ccc9dd5627
SSDEEP

3072:KZzNJYULYwFIrj15afdkq+dGVuXYzWdQqyotNlPa7m8Z:KZz/F04Irh5CkTOuCWdQqyo1OZ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.2a5c531422922978fc4ad74758991230.exe

Files

NEAS.2a5c531422922978fc4ad74758991230.exe
.exe windows:4 windows x86

6654e8f7b28243fef588e0c15c9fe720

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SetLocaleInfoA
InitOnceInitialize
SetUserGeoID
TlsFree
QuirkGetDataWorker
GetComputerNameW
DebugSetProcessKillOnExit
FileTimeToSystemTime
WakeAllConditionVariable
VirtualProtectEx
SetIoRateControlInformationJobObject

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 105KB - Virtual size: 126KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE