NEAS[.]dcbca494eed4f64fc1e9a40c1c991df0[.]exe | Triage

Sharing

General

Target

NEAS.dcbca494eed4f64fc1e9a40c1c991df0.exe
Size

119KB
MD5

dcbca494eed4f64fc1e9a40c1c991df0
SHA1

7da737a2974b54dbd83eca0a8024204f57762c61
SHA256

7cddc3441722878ecd75c1359f43ef4eb899370d24d9c2c3f44712002577fd35
SHA512

08b1882ed27930aafc2034ef564c88cf541ea931bba683229841e30b6d7b98525374d8036f9bed397e2b8233e4ebe45364eb844b45266b81a868dd8a8fde1ce2
SSDEEP

3072:kdygqE1Eu6JqExPGaqTGkhz7kz8sx2WywC:YqE13mqyGaqTGr12Wa

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.dcbca494eed4f64fc1e9a40c1c991df0.exe

Files

NEAS.dcbca494eed4f64fc1e9a40c1c991df0.exe
.exe windows:4 windows x86 arch:x86

20d067160e7fdb90a35bdf41ab202437

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetCommandLineA
RegOpenUserClassesRoot
IsValidLocaleName
GetFullPathNameTransactedA
SetSystemTime
GetProcessWorkingSetSize
MultiByteToWideChar
Process32Next
CreateConsoleScreenBuffer
GetConsoleCP

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 105KB - Virtual size: 126KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE