NEAS[.]0c22395e787ece47111cb6c41dfa2950[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.0c22395e787ece47111cb6c41dfa2950.exe
Size

119KB
MD5

0c22395e787ece47111cb6c41dfa2950
SHA1

51c4060aff32c5fc47dc6c64a41c6ce824c958a9
SHA256

b2170577162c84b49b69a9159a944f18ce52fe5ff16b62a1b63d306e9c695f60
SHA512

d9363705caa92724f6516ce4d43820c73bfe19fc5de136a9ba5a47107925b963dc0ddc763404e70ca29c9a2cc6959f2dd72b7168d4d15b292a5b779380536b1a
SSDEEP

1536:ZwzXy55BPxCqDjlZOpGjFQgjkN/qQzuEHUGZ5J3RTiSb9ftQC0xvo8SnzUKI/hka:ZwjKFCEXhTjyj0GD3kSRLCQdVQ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.0c22395e787ece47111cb6c41dfa2950.exe

Files

NEAS.0c22395e787ece47111cb6c41dfa2950.exe
.exe windows:4 windows x86 arch:x86

6312681e790a8a5d5b97be77bc48cc78

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetLogicalProcessorInformation
EndUpdateResourceW
OpenPrivateNamespaceA
IsCalendarLeapYear
timeGetTime
GetCommTimeouts
SetNamedPipeHandleState
GetThreadUILanguage
GetPrivateProfileStructW
GetExitCodeProcess

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 105KB - Virtual size: 126KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE