NEAS[.]c6ee4e1d94efe5573ea32590e29ac570[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.c6ee4e1d94efe5573ea32590e29ac570.exe
Size

66KB
MD5

c6ee4e1d94efe5573ea32590e29ac570
SHA1

a1574cc89f1a29a853825575ab473b6dc997fd58
SHA256

1ab848e827a6116cf6e178322cce6ecfa6ee70c1ee76d3fd8dc83919e2795951
SHA512

cf0c90e197c30b24feff5aa67f9cb3927ae59bc010eb80df0c1c0c0d88ec70d9380e1a88c202dd8be837b6789e737d80cbac144f67676eacc0754e28eb829e03
SSDEEP

1536:sjhG1znPi8s0o2B5S+J57tDKv0aYEDvWcMY:s8FU0oe5NctvV

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.c6ee4e1d94efe5573ea32590e29ac570.exe

Files

NEAS.c6ee4e1d94efe5573ea32590e29ac570.exe
.exe windows:4 windows x86

01e3dd0e12e2b2be85d22f1df1744ee6

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateJobObjectA
FreeResource
QueryPerformanceCounter
WaitForThreadpoolWorkCallbacks
RegEnumValueA
GetSystemDefaultUILanguage
InitOnceExecuteOnce
FindActCtxSectionGuidWorker
CancelIo
CreateWaitableTimerW

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 51KB - Virtual size: 70KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE