NEAS[.]5d8c1d0fdd550d0c8714c9cf40af43e0[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.5d8c1d0fdd550d0c8714c9cf40af43e0.exe
Size

119KB
MD5

5d8c1d0fdd550d0c8714c9cf40af43e0
SHA1

8cccf3ee3f9d34792e0dec1e18f2ec50c1136c96
SHA256

ce8ea6938d7a6e49acef09818c5ab7abf7ed0e87af7922faa8f49c5f441f5b17
SHA512

a065fc47f9db26102aa82225c90dda4f3d8c0c24a7c1bc1038d96cf972764492835b5450c89ccf5a5a08fd82144ca845a14b27e607a35ea9df3223d6f35049ad
SSDEEP

3072:OT2E9HTgv9P/UEhosMcApOZYoL/P71XX5FwVh:OTNKv9PzoDYZYUfiT

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.5d8c1d0fdd550d0c8714c9cf40af43e0.exe

Files

NEAS.5d8c1d0fdd550d0c8714c9cf40af43e0.exe
.exe windows:4 windows x86 arch:x86

2b5fc3491862ac2547966a566c73d808

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

EnumCalendarInfoExW
WerRegisterCustomMetadata
NeedCurrentDirectoryForExePathW
EnumCalendarInfoExEx
WriteTapemark
ApplicationRecoveryInProgress
GetAtomNameA
CheckTokenMembershipEx
GetSystemDirectoryA

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 105KB - Virtual size: 126KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE