NEAS[.]cdc5355df3321b1536e2c3439f9d5b50[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.cdc5355df3321b1536e2c3439f9d5b50.exe
Size

119KB
MD5

cdc5355df3321b1536e2c3439f9d5b50
SHA1

ef6542190c1c73d3fd16e6da4d5281fd0fd9994f
SHA256

4a619d42ce5b020ee7a65e4a2a77a6b14116730a5a391f96909a1af0b2e6269c
SHA512

8d51a0fbbf5ba77ef603d068cc48b3ed4b2c8c2df1df2d4c69e077a52d7bfd2a45885819f4b6bf182c070497ba4256759963130ba151addf6e9121f3adf59f6f
SSDEEP

3072:jdemo6Wa48tdZTzim50vqg74dz0R0NoIjZqwT:Zemo6Wa4ef2m507+0rkZT

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.cdc5355df3321b1536e2c3439f9d5b50.exe

Files

NEAS.cdc5355df3321b1536e2c3439f9d5b50.exe
.exe windows:4 windows x86 arch:x86

bffa95ff759a290545b69d04c85af850

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SetFileAttributesTransactedA
WritePrivateProfileSectionW
AddRefActCtx
InterlockedIncrement
GetFirmwareEnvironmentVariableExA
EnumResourceLanguagesW
CreateDirectoryTransactedA
SetProcessPreferredUILanguages

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 105KB - Virtual size: 126KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE