NEAS[.]51c69c2f42d5c7addf57e791511fb6d0[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.51c69c2f42d5c7addf57e791511fb6d0.exe
Size

119KB
MD5

51c69c2f42d5c7addf57e791511fb6d0
SHA1

d753b9ccebdf8cd90248c0ab3030c68308fdc442
SHA256

99ca2414861a769909bd7640ea92fc9180443e1c74cf32c8a6cb8ea57d3ff69c
SHA512

0dee4ac26ec5d74e987bf15e8df45713bed9543fa5f9bafb0c1d2053903d87620a046cdde48aa6ec2b4607ae8356846fb8e143a4e56886dee87378a7a16bf237
SSDEEP

3072:UMs2P2kaEXNUeKbuB6pJbBNFrSKSbJntumvShrmVkOFeUs:w2P2kaEXUbvflNFORdtu6ML

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.51c69c2f42d5c7addf57e791511fb6d0.exe

Files

NEAS.51c69c2f42d5c7addf57e791511fb6d0.exe
.exe windows:4 windows x86 arch:x86

c80e2b506dd7b37553967a45ef46ff6b

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

FreeLibraryWhenCallbackReturns
EnumCalendarInfoW
Wow64GetThreadContext
GetNamedPipeAttribute
K32EnumPageFilesA
DisableThreadProfiling
DefineDosDeviceW
PackageFullNameFromId
GetCalendarMonthsInYear

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 105KB - Virtual size: 126KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE