NEAS[.]a0c5acd02f4472f54e202d041896f000[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.a0c5acd02f4472f54e202d041896f000.exe
Size

119KB
MD5

a0c5acd02f4472f54e202d041896f000
SHA1

8cd934d244a776bdb689136c0be711c6e33942f4
SHA256

7e4bcfa36e8e65659c09f21294c8431ec77105d1904e08f4dcb8746f459d4461
SHA512

29d9a9fe612e6807991f0d7de4f1fc8e45933f6325ca37f9bdf28e0a23de5478202f34ed8ea464de83c7ee73908b6ff5c53a97dcfcb18abffe3033fcc227f3a0
SSDEEP

3072:ZQrCQZGU9tCWIvuLCrf1P+8XBaOqmWK2ZF2l:ZQrCQvLXIqCrBPXBaNPK2ZF2l

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.a0c5acd02f4472f54e202d041896f000.exe

Files

NEAS.a0c5acd02f4472f54e202d041896f000.exe
.exe windows:4 windows x86

e13c9c204b6350159c54ba8677f93e17

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GlobalHandle
CreateFileMappingNumaW
WaitNamedPipeW
FlushConsoleInputBuffer
GetThreadLocale
Process32First
GetPackageApplicationIds
BindIoCompletionCallback
StartThreadpoolIo
PrefetchVirtualMemory

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 105KB - Virtual size: 126KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE