NEAS[.]54d9655e2a50239a023601cd0df084a0[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.54d9655e2a50239a023601cd0df084a0.exe
Size

119KB
MD5

54d9655e2a50239a023601cd0df084a0
SHA1

d2105b6be3a3482e757cb0563876674f3488dbb5
SHA256

0289649cd137d3ae328f2e8b73e7cd65d89f5c323aa845b1cd00da81a74dd3a5
SHA512

8037bb07a8e1a9f305145edcd3ff34f2a0a5c1bc4cd8ca3f2ea7bd6ca8c532d7bb89862cb45c68850c096c49b611db3f970f9e690794110f14652f43258a2c70
SSDEEP

1536:9wVZqmgDARMZzhpIAV3F96MvKI8o08JMur6ssve0oSgSWV1N5FRy0Z5JjBMdKw6C:20MSIw9lSo0m0sj+gSuNQ0fHMMMBJQu

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.54d9655e2a50239a023601cd0df084a0.exe

Files

NEAS.54d9655e2a50239a023601cd0df084a0.exe
.exe windows:4 windows x86 arch:x86

8488877e2f7fde982292a5e5a98a896d

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

EnumResourceLanguagesExA
WriteProfileSectionW
timeGetTime
OpenSemaphoreA
GetNumaProximityNode
FindAtomW
TermsrvGetWindowsDirectoryA
NlsUpdateLocale
FlushViewOfFile
InitializeEnclave
RestoreLastError

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 105KB - Virtual size: 126KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE