NEAS[.]c0edf1ebdf9a6779df6dc4de148d5310[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.c0edf1ebdf9a6779df6dc4de148d5310.exe
Size

119KB
MD5

c0edf1ebdf9a6779df6dc4de148d5310
SHA1

e213d7732f8f42e0a179bf6f0c585f0e5b0535d3
SHA256

ca7d367b0684919e96e41588b2b95ab2f8b7262948810604b784357304f44944
SHA512

e5189ba0858c5ad146ae7b1ce2c83a29aad86ae58b16a555f71c13a13612c68a3de958acdfccba7b148a1cef2e6d1cf21b02d4602bc84d3e71d9a3606bd73d56
SSDEEP

1536:lj9J8fgy6E9cX63Dt7oh0T6hkWC6aCIPZbo++SCPFoCMb4psPWYKG2KyWLHvbFu1:R2B3Z7oe4C/9Pa+ei4psPWjdKyY/2v/

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.c0edf1ebdf9a6779df6dc4de148d5310.exe

Files

NEAS.c0edf1ebdf9a6779df6dc4de148d5310.exe
.exe windows:4 windows x86

613850117261d0c50642cb391c2c8304

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetNamedPipeAttribute
GetLocaleInfoW
LocalSize
BaseUpdateAppcompatCache
BasepProcessInvalidImage
SetThreadDescription
ReadConsoleOutputCharacterW
WriteConsoleOutputW
FindFirstFileTransactedA
TlsAlloc

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 105KB - Virtual size: 126KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE