NEAS[.]64d028ed71a21f7aabddbdeafce4dbb0[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.64d028ed71a21f7aabddbdeafce4dbb0.exe
Size

119KB
MD5

64d028ed71a21f7aabddbdeafce4dbb0
SHA1

0b2c157de23e0da3d4d264e0a9cc53bfafbdb576
SHA256

22832ed8ed6f6a0515d9d9f66b4904cafc8b61a213ef945ea1d4255f5f30b641
SHA512

d09563732bfaba446e9488fbb64d3c3c30538023449996e9fe4c66015a5ff2ccdc21977e1268451f47710876456ff516af1833e15221a381e2cd7fe1ad220f27
SSDEEP

3072:OFdXKd0+XmI/VhipASdsg9Ac/XdmrIsBvRYoO:OH6d0amI/80lc/Er5Y/

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.64d028ed71a21f7aabddbdeafce4dbb0.exe

Files

NEAS.64d028ed71a21f7aabddbdeafce4dbb0.exe
.exe windows:4 windows x86

731ba89a9a09693ddc5805582367e3a6

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ReadConsoleW
_lread
UTRegister
GetCalendarDateFormatEx
CloseThreadpoolCleanupGroupMembers
SetFileAttributesA
GetCalendarWeekNumber
PrivMoveFileIdentityW
BeginUpdateResourceW
PssWalkMarkerGetPosition

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 105KB - Virtual size: 126KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE