NEAS[.]5478f0c5b6454cbd2098d7c0bc346790[.]exe | Triage

Sharing

General

Target

NEAS.5478f0c5b6454cbd2098d7c0bc346790.exe
Size

119KB
MD5

5478f0c5b6454cbd2098d7c0bc346790
SHA1

9c8afb4dc59f1b73c6e37155244ca8fd49d81b28
SHA256

6d275ab98739b0cc288c9c4a00ba9031c82138dd7339213afad11b64ac099312
SHA512

d3bb4a82fa0b4a5b9ffee30c14229ca115eccb5c6b2d711fc8d1724b6616564f89f168a1813bb4a88f66f2f6ca52a1e78fa3302d6d16fa0075abb6fbb5edaef7
SSDEEP

3072:l6Y2KQY00HLyQvCovYGGnG8/UP2w1vd/lmcLyI:ruY00HLpvYhG2Uuqllp

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.5478f0c5b6454cbd2098d7c0bc346790.exe

Files

NEAS.5478f0c5b6454cbd2098d7c0bc346790.exe
.exe windows:4 windows x86 arch:x86

6f394f29f6579f97b25f2b7cdf870f3f

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
GetSystemTimeAdjustment
ResolveDelayLoadedAPI
TermsrvGetWindowsDirectoryA
QueryIoRateControlInformationJobObject
Process32NextW
WerRegisterAppLocalDump
ReadConsoleOutputCharacterA
GetLongPathNameA

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 105KB - Virtual size: 126KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE