NEAS[.]9cf956a5b261de994447fe0628eeef60[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.9cf956a5b261de994447fe0628eeef60.exe
Size

748KB
MD5

9cf956a5b261de994447fe0628eeef60
SHA1

fcbcc191d3fc891d1f22fd40cb3fa6f037ad7bf6
SHA256

50fcfccef79a62f78bf41cde24b73a7731c7aec7401bfb77e4b82e300845af2e
SHA512

856c1cd6cf00e08e154679a45a3648d6a37cb74735b8a316df1c9d27522318c296ecee02afe6abf9486dbe1e0abc0143495b969b254c60a5f512e78611bbef12
SSDEEP

12288:Gt4uFkOiZWMR0/KC8glNv0IFvMkFYxRBnu9du1fbwLeOIArAnjJiYiGy:Gt4uFvNiQ0I56RywfbUg4AnjJXiGy

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.9cf956a5b261de994447fe0628eeef60.exe

Files

NEAS.9cf956a5b261de994447fe0628eeef60.exe
.exe windows:4 windows x86

33f43271f5b3cd45a6c17457ed57fa6a

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

Thread32Next
GetCurrentProcessId

user32

GetDoubleClickTime

Sections

.text
Size: 741KB - Virtual size: 744KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 138B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE