NEAS[.]9c9361590058981675c2ef36068485b0[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.9c9361590058981675c2ef36068485b0.exe
Size

119KB
MD5

9c9361590058981675c2ef36068485b0
SHA1

ab48b2a2e3e2f54b771deca23462676b30025ef9
SHA256

725c3dd0abd485a982986fad51f2abda9fe4907715da6f4902d5091050fc13fb
SHA512

bf71b80435e7e056488a7230de0d8a5972b10e813b182351d4e86d5239a60dd1f5b81daa4edc078c02e3fd1ca4a8d9784c2691db71a76191ab782794ce3e7e88
SSDEEP

3072:jHWy1e9YdjQyzB/7jsz7uK0IN/Vx1GzpeqOnP:LWyci+k/sfWpeb

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.9c9361590058981675c2ef36068485b0.exe

Files

NEAS.9c9361590058981675c2ef36068485b0.exe
.exe windows:4 windows x86

0a8532a2ab2a88ba6bca7b656f40dbfd

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetFileAttributesExA
BuildCommDCBW
SetSystemTime
BasepGetAppCompatData
SetThreadpoolStackInformation
OutputDebugStringA
timeGetDevCaps
Process32First
GetNumaNodeProcessorMaskEx
RegRestoreKeyW

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 105KB - Virtual size: 126KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE