NEAS[.]587c7ca36fd53055df707824da082880[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.587c7ca36fd53055df707824da082880.exe
Size

119KB
MD5

587c7ca36fd53055df707824da082880
SHA1

1b19bf62a55e0a29ab96b234109b234683a079b3
SHA256

ffaa261f456e21756c89f54d52faa4eb9dfd4592278c75946a2a4d24b7bb7595
SHA512

405eafff612256fcfef2bf3133f3294d05a8290146284c15353a53997d2196cc2eb1f686adf7ade9b2121f3277be3424d0422a829d9320180ccb470e5f1c716f
SSDEEP

1536:1QHMtZnBsxVqpvE8nVxMbZhDAl8aNX0PO4XwiRITfT0669hc5v3gCbdGbuQGjOtT:BnB7pvrVibZhD780m4/G1dbOojOHz

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.587c7ca36fd53055df707824da082880.exe

Files

NEAS.587c7ca36fd53055df707824da082880.exe
.exe windows:4 windows x86 arch:x86

5a7ba2b67a97305f8265f217f8fe3f2c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetActiveProcessorGroupCount
GlobalFindAtomA
SetThreadExecutionState
GetSystemDefaultLocaleName
GetFileInformationByHandleEx
CancelTimerQueueTimer
NeedCurrentDirectoryForExePathA
SetStdHandleEx
PssWalkSnapshot

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 105KB - Virtual size: 126KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE