NEAS[.]6af66595535f226ccbd5b8d585eafe60[.]exe | Triage

Sharing

General

Target

NEAS.6af66595535f226ccbd5b8d585eafe60.exe
Size

66KB
MD5

6af66595535f226ccbd5b8d585eafe60
SHA1

6ce4f0adff4dc576c1b62c47b31c1c2eee198adb
SHA256

ce821304e3d904c9a5a34281121940b232ab686afb15c3ca9c964092d9450e87
SHA512

39cbae34aeea1bf88673760a1af4c67a0b3c2567d3174563b6291c60a343ab521edff80510e4d693da798bb78fe173232cac0d24d4510bd74a17765b344767da
SSDEEP

1536:5HyVejosIgMkomX8LAbGmoKrwU0GMDLFxDntixv:5HyccsIg+9moEaRFxDod

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.6af66595535f226ccbd5b8d585eafe60.exe

Files

NEAS.6af66595535f226ccbd5b8d585eafe60.exe
.exe windows:4 windows x86

fe898a31397431d4041bbafb767275c2

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetConsoleFontInfo
EnumResourceTypesExA
RegGetKeySecurity
InitializeCriticalSection
DebugSetProcessKillOnExit
AddLocalAlternateComputerNameA
CreateFileTransactedA
RegUnLoadKeyA
GetCalendarMonthsInYear

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 51KB - Virtual size: 70KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE