NEAS[.]c8546fabf34bd88b346ea25656d889c0[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.c8546fabf34bd88b346ea25656d889c0.exe
Size

119KB
MD5

c8546fabf34bd88b346ea25656d889c0
SHA1

4ca3dee92df9880b6ab6510d4d0d94e5384f9631
SHA256

0ce959e180f78e12f7c752e2172f7b8b0903e43e22cb8725229a3c164c13bd9f
SHA512

4439da9356beb0f7251eef9ed4c86f16b5c3f67412dc1ae902c5e797246c911873e0c5330aa84bec8a468b6b5926aabff6d8e8efe46ad4ffb161c4aec93d8ff4
SSDEEP

3072:FXzTlRyATsVJTnZWfqv4X633GQourpK2X5WoTcJIPZY89ZvM:FjBYAA9WqvW63WbuIdyuD

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.c8546fabf34bd88b346ea25656d889c0.exe

Files

NEAS.c8546fabf34bd88b346ea25656d889c0.exe
.exe windows:4 windows x86

a3a8afb0bcaf973a01fe3bd705f4f036

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SetTapeParameters
SetThreadIdealProcessorEx
UTRegister
UpdateProcThreadAttribute
GetVolumeNameForVolumeMountPointA
lstrlenW
WerUnregisterRuntimeExceptionModuleWorker
GetConsoleAliasW
FindCloseChangeNotification

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 105KB - Virtual size: 126KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE