NEAS[.]009fc5436f905346a9e67aceea73bf00[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.009fc5436f905346a9e67aceea73bf00.exe
Size

119KB
MD5

009fc5436f905346a9e67aceea73bf00
SHA1

81d4230444c62057a226aaa2b0943f893500a728
SHA256

56b82ec81e6d5579412f5a541e56a66ed33d7b07ed27741224685f02fd820ac8
SHA512

e22552daa461f3b6db29937f3ef868718ee742fcfb0c8ebfcba36dc007675af25f3d8ce81924c193d19a51e0a42e1ab6d9eaa65143b571b57870e9decc1eaa1c
SSDEEP

1536:RO8bNh+ExbotVg7aF/t663c9QWCgGxXYgLQerudlEW8SzGVu+A8DlRbfA+BM3fyu:AobisaRc9QWCgAY3JQtAUhfA+BM3fx

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.009fc5436f905346a9e67aceea73bf00.exe

Files

NEAS.009fc5436f905346a9e67aceea73bf00.exe
.exe windows:4 windows x86 arch:x86

b10ac0c4ff6296bbda429c2dc33115ca

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SizeofResource
FindAtomA
RegEnumValueA
GetDllDirectoryA
IsValidCalDateTime
CreateFileW
DosPathToSessionPathA
IsBadReadPtr
LocalShrink
EnumLanguageGroupLocalesA
GetDateFormatWWorker
CallNamedPipeA

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 105KB - Virtual size: 126KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE