NEAS[.]6d19694912e50d4dee3856c9cc098640[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.6d19694912e50d4dee3856c9cc098640.exe
Size

54KB
MD5

6d19694912e50d4dee3856c9cc098640
SHA1

4693ee7d42f6c45cc1003d262a9b2c06f9e9e304
SHA256

cc4cf508e3bf4e9224e6282a55c06d10c559eb99e6a62b0e5cda597f3eeaf0b8
SHA512

2794d7ed61bbc801335cbd2aa5d90efad98ef331b2bad63f4cc8818c8637ff0e4cd02b0a8818797f1a68cb811422e71f09184368e1b8dae22ffadd6f60b03c59
SSDEEP

768:zTAiYUVaQDKVSputCPsED3VK2+ZtyOjgO4r9vFAg2rqcjVm:HAqamKwugYTjipvF2P4

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.6d19694912e50d4dee3856c9cc098640.exe

Files

NEAS.6d19694912e50d4dee3856c9cc098640.exe
.exe windows:5 windows x86

b54757880e34d193f6c36b5f50a2be11

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

cabinet

ord13

mscms

CreateColorTransformW
CreateProfileFromLogColorSpaceW
CreateDeviceLinkProfile

gdi32

SetWindowOrgEx
GetWindowOrgEx
CreateDCA
CheckColorsInGamut

kernel32

ExitProcess
GetConsoleCursorInfo
GetProcAddress
GetModuleHandleW

Sections

.text
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ