NEAS[.]d88c10637c7fe41f485edc7e0fb26a30[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.d88c10637c7fe41f485edc7e0fb26a30.exe
Size

320KB
MD5

d88c10637c7fe41f485edc7e0fb26a30
SHA1

7b7de8394f935dbb37513865207569b2f15cb1db
SHA256

1022da9ae98351ad2aa0420606106ab94a462946b72fc3e28c59310c08ec5a32
SHA512

81d8b68f4c0fe7a9a9c773db437f85955b7a40124c023f51de8c12f2ba84af2264550e969061b23ef09fef6f751f6d25931d1e3c614d3794f57b0a84575f5161
SSDEEP

6144:PGw6MK0UH2RfS155ONNXBuWoJBO9OMbHLkAqF7Ief9UmM7/uT:v6h2EB0NxDIBuOFe7/uT

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.d88c10637c7fe41f485edc7e0fb26a30.exe

Files

NEAS.d88c10637c7fe41f485edc7e0fb26a30.exe
.exe windows:4 windows x86

b03c344effe36d7f05c671699af7d889

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

FindFirstFileA
GetConsoleCommandHistoryLengthA
ProcessIdToSessionId
CreateFileMappingA
GetPrivateProfileSectionNamesW
ReadConsoleOutputCharacterW
OpenSemaphoreW
GetLogicalDrives
SetConsoleTitleW
SetConsoleNlsMode

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.brdata
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tc
Size: 244KB - Virtual size: 244KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE