NEAS[.]5859bd4163ea1466ce309bde489d5f90[.]exe | Triage

Sharing

General

Target

NEAS.5859bd4163ea1466ce309bde489d5f90.exe
Size

119KB
MD5

5859bd4163ea1466ce309bde489d5f90
SHA1

8a6d47187cd3fe0aa6cb6d70c36f21a363efeb8d
SHA256

bc421eeba5f8cad31a8da15877c3a31ef0e25658448263c5312f3abe4eef5e8d
SHA512

a8c59c6b2d065fe6a42678acf7df32c79a5fed763e9d3d6e13033802560a019af284f2e7f5e3fb61834b1937b58ac0223e45411ba6381d79f10f350985f34fcc
SSDEEP

3072:masR0dF21d9VOFR3+wRiwE2T2omyBrraP6WEVxuXHc:+9VcwQT20ss

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.5859bd4163ea1466ce309bde489d5f90.exe

Files

NEAS.5859bd4163ea1466ce309bde489d5f90.exe
.exe windows:4 windows x86 arch:x86

84902487fb968c631cd62eebec1352cd

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SuspendThread
GetCommMask
GetLocalTime
QuirkGetDataWorker
SetConsoleLocalEUDC
EnumResourceTypesA
IsDBCSLeadByteEx
GetTickCount64
GetUserDefaultLocaleName
RegOpenKeyExA
PssWalkMarkerFree

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 105KB - Virtual size: 126KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE