NEAS[.]bc3855c719c54bce4da42167aa98c3a0[.]exe | Triage

Sharing

General

Target

NEAS.bc3855c719c54bce4da42167aa98c3a0.exe
Size

119KB
MD5

bc3855c719c54bce4da42167aa98c3a0
SHA1

70951c0e0a506337295e7e1a6fa7b7d0750887fb
SHA256

bdd07a00a6cc990e9d5c11d19ce07dcca89faf3c97a396c4a3eefe17d0a138f0
SHA512

cdd98c88ffa29a4957f19fa7a00a841974713566fa6a0eb2abee52f4bceefa616c053e27d415304c4d6798ae411d35da7023694ed626bc2c42dd1d1a7b68edb1
SSDEEP

3072:goWYe596J/E7CGm56XqxRRWRKiki0FzIQJch/oWRZXZXS/UHq7o:gokjHE6X6RMRKBigJctoWrpXS8HUo

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.bc3855c719c54bce4da42167aa98c3a0.exe

Files

NEAS.bc3855c719c54bce4da42167aa98c3a0.exe
.exe windows:4 windows x86 arch:x86

2b74a2354981c5f43f85f9de107d50ac

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetTickCount
SetEnvironmentVariableW
AddVectoredContinueHandler
GlobalGetAtomNameA
K32EnumDeviceDrivers
SetEnvironmentStringsA
GetProcessIoCounters
RemoveLocalAlternateComputerNameW
InitAtomTable

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 105KB - Virtual size: 126KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE